🇩🇪
NxtGenIT
2026-11-07 05:49:24
UTC ·
(1 day ago)
Honeytrap Honeypot hit
FTP Brute-Force
🇩🇪
PepeHost.pl
2026-10-23 09:27:40
UTC ·
(2 weeks ago)
Port scan: connection attempts to closed ports (fail2ban)
Port Scan
🇫🇮
iamxorum
2026-10-03 18:18:41
UTC ·
(1 month ago)
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-10-03T18:18:40.472585+00:00 XRM-00 kernel: [521532.767930] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=148.230.199.9 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=106 ...
show more
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-10-03T18:18:40.472585+00:00 XRM-00 kernel: [521532.767930] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=148.230.199.9 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=12637 DF PROTO=TCP SPT=55316 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇮
iamxorum
2026-10-01 09:48:25
UTC ·
(1 month ago)
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-10-01T09:48:25.121341+00:00 XRM-00 kernel: [318126.240053] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=148.230.199.9 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=106 ...
show more
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-10-01T09:48:25.121341+00:00 XRM-00 kernel: [318126.240053] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=148.230.199.9 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=29711 DF PROTO=TCP SPT=50017 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇮
iamxorum
2026-09-28 20:19:08
UTC ·
(1 month ago)
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-28T20:19:07.722257+00:00 XRM-00 kernel: [96778.436049] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=148.230.199.9 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=110 I ...
show more
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-28T20:19:07.722257+00:00 XRM-00 kernel: [96778.436049] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=148.230.199.9 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=23155 DF PROTO=TCP SPT=55526 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇮
iamxorum
2026-09-26 12:32:42
UTC ·
(1 month ago)
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-26T12:32:41.892715+00:00 XRM-00 kernel: [ 4426.761979] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=148.230.199.9 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=106 I ...
show more
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-26T12:32:41.892715+00:00 XRM-00 kernel: [ 4426.761979] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=148.230.199.9 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=11792 DF PROTO=TCP SPT=52226 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇷
thecocasio
2026-09-12 20:45:59
UTC ·
(1 month ago)
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-09-12T20:45:59Z.
Port Scan
2026-08-09 12:21:05
UTC ·
(2 months ago)
Try to connect to Port_Scan_445_stealth
Port Scan
🇫🇷
✨
2026-08-01 00:31:17
UTC ·
(3 months ago)
Rule : Security
Rule: Security
Event: Security
S-1-0-0 - - 0x0 S-1-0-0 Administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM - - - 0 0x0 - 148.230.199.9 61977
Port Scan
Hacking
Brute-Force
🇩🇪
check-the-sum.fr
2026-07-22 23:17:24
UTC ·
(3 months ago)
Port Scanning
Port Scan
🇩🇪
Luhte
2026-07-16 11:11:28
UTC ·
(3 months ago)
Unsolicited TCP connection from 148.230.199.9 to port 0 at 2026-07-16T11:11:28Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan
Hacking
🇩🇪
phil2k
2026-06-25 01:05:04
UTC ·
(4 months ago)
portscan on multiple TCP ports :
Firewall: Within 2026-06-23 00:45:01 - 2026-06-23 00:45:02 CEST(+0200) identified: unallowed access from 148.230.199.9/32 on port 445(microsoft-ds) (1 trial)
Fail2ban: Within 2026-06-23 00:45:01 - 2026-06-23 00:45:02 ...
show more
portscan on multiple TCP ports :
Firewall: Within 2026-06-23 00:45:01 - 2026-06-23 00:45:02 CEST(+0200) identified: unallowed access from 148.230.199.9/32 on port 445(microsoft-ds) (1 trial)
Fail2ban: Within 2026-06-23 00:45:01 - 2026-06-23 00:45:02 CEST(+0200) banned: 4 times by fail2ban[firewall]; 4 times by fail2ban[recidive]
show less
Port Scan
🇩🇪
phil2k
2026-06-22 22:45:06
UTC ·
(4 months ago)
fail2ban:firewall:2026-06-23T00:45:01.891225+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=148.230.199.9 DST=<PRIVATE_IPv4> LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=8936 DF PROTO=TCP SPT=53189 DPT=445 WINDOW=8192 RE ...
show more
fail2ban:firewall:2026-06-23T00:45:01.891225+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=148.230.199.9 DST=<PRIVATE_IPv4> LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=8936 DF PROTO=TCP SPT=53189 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
2026-06-23T00:45:02.630912+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=148.230.199.9 DST=<PRIVATE_IPv4> LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=9014 DF PROTO=TCP SPT=53189 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
show less
DDoS Attack
Port Scan
Brute-Force
🇭🇰
mutebot.net
2026-05-21 03:49:56
UTC ·
(5 months ago)
SRC=148.230.199.9, PROTO=TCP, SPT=32829, DPT=445
Port Scan
🇫🇷
sthoyer.de
2026-05-07 03:05:55
UTC ·
(6 months ago)
May 7 05:05:54 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=148.230.199.9 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=29420 DF PROTO=TCP SPT=61180 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ...
show more
May 7 05:05:54 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=148.230.199.9 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=29420 DF PROTO=TCP SPT=61180 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
