Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ...
show moreReconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 6346/tcp. Observed event time: 2026-04-12 06:08:01 UTC. Report from passive honeypot only; no payload or credentials included.
show less
monitor: on VM-0-7-ubuntu | port: 21386 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show moremonitor: on VM-0-7-ubuntu | port: 21386 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
(smtpauth) Failed SMTP AUTH login from 158.173.20.123 (NL/The Netherlands/North Holland/Amsterdam/-/ ...
show more(smtpauth) Failed SMTP AUTH login from 158.173.20.123 (NL/The Netherlands/North Holland/Amsterdam/-/-)
show less
54 requests with user_agent.original Mozilla/5.0 (X11; U; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more54 requests with user_agent.original Mozilla/5.0 (X11; U; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/115.0.5738.217 Chrome/115.0.5738.217 Safari/537.36
53 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1
50 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.6) Gecko/20050319
48 requests with user_agent.original AppleCoreMedia/1.0.0.23A344 (Macintosh; U; Intel Mac OS X 14_0; da_dk)
48 requests with user_agent.original Mozilla/5.0 (Linux; Android 9) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/119.0.6045.66 Mobile DuckDuckGo/1 Lilo/1.2.3 Safari/537.36
48 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/102.0.5143.178 Chrome/102.0.5143.178 Safari/537.36
48 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64; SMARTEMB Build/3.12.9076) AppleWebKit/537.36 (KHTML, like Ge
show less