🇳🇱
knock
2026-07-03 02:59:55
(1 day ago)
Knock-Knock honeypot brute-force: SMB (8 total hits)
Brute-Force
🇫🇷
MatStef132
2026-06-30 22:13:43
(4 days ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 13:25:11
(5 days ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇹
Progetto1
2026-06-25 21:49:03
(1 week ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
🇫🇷
TheHoneyPotter
2026-06-25 02:32:44
(1 week ago)
Honeypot [fc-honeypot]: SMB traffic on port 445
Reported by: https://github.com/sefinek/T-Pot-To-Abu ...
show more
Honeypot [fc-honeypot]: SMB traffic on port 445
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Hacking
🇫🇷
sthoyer.de
2026-06-24 10:18:34
(1 week ago)
Jun 24 12:18:32 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Jun 24 12:18:32 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.247.21.209 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=6588 DF PROTO=TCP SPT=61568 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇷
sthoyer.de
2026-06-22 10:44:10
(1 week ago)
Jun 22 12:44:08 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Jun 22 12:44:08 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.247.21.209 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=31668 DF PROTO=TCP SPT=50078 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇬🇧
PeravixGroup
2026-06-16 03:13:36
(2 weeks ago)
Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ...
show more
Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud
show less
Hacking
Exploited Host
🇦🇺
dyln
2026-06-04 11:44:45
(1 month ago)
Dyls honeypot brute-force: SMB (4 total hits)
Brute-Force
🇮🇩
hermawan
2026-05-31 02:26:51
(1 month ago)
Captured JA4H: ge20n_fd2543106793 | Log: 103.247.21.209 - - [31/May/2026:09:23:41 +0700] "GET /image ...
show more
Captured JA4H: ge20n_fd2543106793 | Log: 103.247.21.209 - - [31/May/2026:09:23:41 +0700] "GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2025/11_November_2025/Infografis-Bulanan_Prediksi_Hujan_Bulan_DESEMBER_Tahun_2025-JANUARI-FEBRUARI_Tahun_2026_Update_Dari_Analisis_Bulan_Oktober_2025_di_Provinsi_Jawa_Timur.webp HTTP/2.0" 200 266490 "https://staklim-jatim.bmkg.go.id/index.php/profil/meteorologi/list-of-all-tags/4258" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.5142.1679 Mobile Safari/537.36" ge20n_accept,user-agent,referer,sec-fetch-dest,accept-encoding,accept-language,host...
...
show less
Email Spam
Hacking
🇷🇴
Fn4ticHz
2026-05-29 02:43:35
(1 month ago)
DDoS blocked via ZeroGuard.ID
DDoS Attack
Exploited Host
🇮🇩
hermawan
2026-05-27 00:55:31
(1 month ago)
[Wed May 27 07:55:28.633991 2026] [security2:error] [pid 362065:tid 139875572414144] [client 103.247 ...
show more
[Wed May 27 07:55:28.633991 2026] [security2:error] [pid 362065:tid 139875572414144] [client 103.247.21.209:37388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 10; SM-A115U Build/QP1A.190711.020; ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/139.0.7258.158 Mobile Safari/537.36 BingSapphire/32.3.430811001 request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "ahZBAOS2_MwjvxH6tiEsKQABlhc"
...
show less
Email Spam
Hacking
🇫🇷
MatStef132
2026-05-24 20:58:26
(1 month ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇳🇱
knock
2026-05-16 06:48:59
(1 month ago)
Knock-Knock honeypot brute-force: SMB (4 total hits)
Brute-Force
🇩🇪
Vegascosmetics
2026-05-12 21:50:55
(1 month ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot