🇩🇪
formality
2026-03-13 22:19:16
(5 months ago)
Invalid user admin from 152.42.214.69 port 37686
Brute-Force
SSH
🇧🇷
gbzret4d
2026-03-13 22:12:05
(5 months ago)
Blocked by CrowdSec. Scenario: crowdsecurity/ssh-slow-bf
Brute-Force
SSH
🇧🇷
chronos
2026-03-13 22:04:05
(5 months ago)
2026-03-13 18:34:22 UTC-3||Unauthorized connection attempt detected for port scanning
Port Scan
🇺🇸
entangled_mongoose
2026-03-13 21:44:03
(5 months ago)
Attempted login with username root.
SSH
Brute-Force
2026-03-13 21:43:49
(5 months ago)
2026-03-14T06:42:00.089985+09:00 kabedon sshd[489591]: Failed password for root from 152.42.214.69 p ...
show more
2026-03-14T06:42:00.089985+09:00 kabedon sshd[489591]: Failed password for root from 152.42.214.69 port 59686 ssh2
2026-03-14T06:42:53.261794+09:00 kabedon sshd[490090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.214.69 user=root
2026-03-14T06:42:55.688853+09:00 kabedon sshd[490090]: Failed password for root from 152.42.214.69 port 58738 ssh2
2026-03-14T06:43:46.408531+09:00 kabedon sshd[490588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.214.69 user=root
2026-03-14T06:43:48.444541+09:00 kabedon sshd[490588]: Failed password for root from 152.42.214.69 port 36652 ssh2
...
show less
Brute-Force
SSH
🇺🇸
pixelmemory.us
2026-03-13 21:43:13
(5 months ago)
2026-03-13T13:42:15.268410-08:00 pixelmemory sshd-session[2104992]: pam_unix(sshd:auth): authenticat ...
show more
2026-03-13T13:42:15.268410-08:00 pixelmemory sshd-session[2104992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.214.69 user=root
2026-03-13T13:42:17.405230-08:00 pixelmemory sshd-session[2104992]: Failed password for root from 152.42.214.69 port 38740 ssh2
2026-03-13T13:43:10.272325-08:00 pixelmemory sshd-session[2105078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.214.69 user=root
2026-03-13T13:43:12.618983-08:00 pixelmemory sshd-session[2105078]: Failed password for root from 152.42.214.69 port 42902 ssh2
...
show less
Brute-Force
SSH
🇩🇪
flixie
2026-03-13 21:42:25
(5 months ago)
2026-03-13T22:40:16.264977 ******* sshd[2773384]: Connection closed by authenticating user root 152. ...
show more
2026-03-13T22:40:16.264977 ******* sshd[2773384]: Connection closed by authenticating user root 152.42.214.69 port 56440 [preauth]
2026-03-13T22:41:29.922425 ******* sshd[2773884]: Connection closed by authenticating user root 152.42.214.69 port 57674 [preauth]
2026-03-13T22:42:24.537674 ******* sshd[2774124]: Connection closed by authenticating user root 152.42.214.69 port 42634 [preauth]
show less
Brute-Force
SSH
🇧🇷
helix
2026-03-13 21:42:23
(5 months ago)
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show more
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Brute-Force
SSH
🇨🇦
nickto
2026-03-13 21:41:29
(5 months ago)
Mar 13 17:41:18 Tower sshd-session[2354075]: Connection from 152.42.214.69 port 48462 on 192.168.10. ...
show more
Mar 13 17:41:18 Tower sshd-session[2354075]: Connection from 152.42.214.69 port 48462 on 192.168.10.220 port 22 rdomain ""
Mar 13 17:41:19 Tower sshd-session[2354075]: Failed password for root from 152.42.214.69 port 48462 ssh2
Mar 13 17:41:20 Tower sshd-session[2354075]: Connection closed by authenticating user root 152.42.214.69 port 48462 [preauth]
Mar 13 17:41:20 Tower sshd[3583]: srclimit_penalise: ipv4: new 152.42.214.69/32 deferred penalty of 5 seconds for penalty: failed authentication
show less
Brute-Force
SSH
🇧🇷
gbzret4d
2026-03-13 21:40:18
(5 months ago)
Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf
Brute-Force
SSH
🇧🇷
chronos
2026-03-13 21:34:22
(5 months ago)
Generic malicious activity detected: ALERT: External attempt to access critical TCP port... | Proto: ...
show more
Generic malicious activity detected: ALERT: External attempt to access critical TCP port... | Proto: TCP | Port: 22 | Location: Singapore, Singapore
show less
Port Scan
Hacking
🇳🇱
Linuxmalwarehuntingnl
2024-07-01 10:39:53
(2 years ago)
Unauthorized connection attempt
Brute-Force
🇭🇺
DumaNet
2024-06-05 00:40:00
(2 years ago)
Web app attack attempts, scanning for vulnerability.
Date: 2024 Jun 04. 06:42:55
Source IP: 152.42 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2024 Jun 04. 06:42:55
Source IP: 152.42.214.69
Portion of the log(s):
152.42.214.69 - [04/Jun/2024:06:36:52 +0200] "GET /formcraft/file-upload/server/php/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36"
152.42.214.69 - [04/Jun/2024:06:36:50 +0200] "GET /media/mediamgr/other/jq_fileupload/server/php/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36"
152.42.214.69 - [04/Jun/2024:06:36:48 +0200] "GET /public/javascript/jquery.upload/server/php/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36"
152.42.214.69 - [04/Jun/2024:06:36:48 +0200] "GET /assets/vendor_admin/plugins/jquery-file-upload/server/php/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
show less
Web App Attack
🇭🇺
DumaNet
2024-06-04 23:59:00
(2 years ago)
Web app attack attempts, scanning for vulnerability.
Date: 2024 Jun 04. 06:37:34
Source IP: 152.42 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2024 Jun 04. 06:37:34
Source IP: 152.42.214.69
Portion of the log(s):
152.42.214.69 - [04/Jun/2024:06:36:01 +0200] "GET /assets/plugins/elfinder/elfinder.html HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36"
152.42.214.69 - [04/Jun/2024:06:35:58 +0200] "GET /admin/filemanager/dialog.php
152.42.214.69 - [04/Jun/2024:06:35:56 +0200] "GET /scripts/filemanager/dialog.php
152.42.214.69 - [04/Jun/2024:06:35:54 +0200] "GET /assets/tinymce/plugins/filemanager/dialog.php
152.42.214.69 - [04/Jun/2024:06:35:52 +0200] "GET /phpformbuilder/plugins/filemanager/dialog.php
152.42.214.69 - [04/Jun/2024:06:35:50 +0200] "GET /assets/plugins/filemanager/dialog.php
152.42.214.69 - [04/Jun/2024:06:35:47 +0200] "GET /assets/filemanager/dialog.php
152.42.214.69 - [04/Jun/2024:06:35:45 +0200] "GET /filemanager/dialog.php
152.42.214.69 - [04/Jun/2024:06:35:43 +0200] "GET
show less
Web App Attack
🇫🇷
LOGiST
2024-06-03 16:09:12
(2 years ago)
Bot attack detected : webscan vulnerability
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
Bot attack detected : webscan vulnerability
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36
show less
Bad Web Bot