π³π±
kumiko
2024-02-01 00:06:25
(2 years ago)
[2024-02-01 00:01:37] Persistent attack/probing over several days.
Port Scan
Brute-Force
Bad Web Bot
Anonymous
2024-01-31 18:45:35
(2 years ago)
Jan 31 19:45:33 syscgn kernel: [1111164.773912] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e ...
show more
Jan 31 19:45:33 syscgn kernel: [1111164.773912] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e:7e:26:f1:c0:08:00 SRC=162.144.3.79 DST=185.194.141.106 LEN=80 TOS=0x00 PREC=0x00 TTL=121 ID=5292 PROTO=TCP SPT=4268 DPT=27173 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Hacking
π©πͺ
gnb
2024-01-31 18:41:42
(2 years ago)
2024-01-31T19:33:23.590547+01:00 atlas kernel: [14738233.618511] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ...
show more
2024-01-31T19:33:23.590547+01:00 atlas kernel: [14738233.618511] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=128 ID=2620 PROTO=TCP SPT=3644 DPT=29877 WINDOW=64240 RES=0x00 SYN URGP=0
2024-01-31T19:34:42.482549+01:00 atlas kernel: [14738312.511361] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=128 ID=55448 PROTO=TCP SPT=56472 DPT=42513 WINDOW=64240 RES=0x00 SYN URGP=0
2024-01-31T19:41:41.884706+01:00 atlas kernel: [14738731.915077] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=122 ID=34833 PROTO=TCP SPT=35857 DPT=63128 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
π©πͺ
mattk
2024-01-31 18:13:36
(2 years ago)
port scan
Port Scan
Anonymous
2024-01-31 18:13:19
(2 years ago)
Jan 31 19:13:17 syscgn kernel: [1109228.850260] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e ...
show more
Jan 31 19:13:17 syscgn kernel: [1109228.850260] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e:7e:26:f1:c0:08:00 SRC=162.144.3.79 DST=185.194.141.106 LEN=80 TOS=0x00 PREC=0x00 TTL=121 ID=43056 PROTO=TCP SPT=44080 DPT=54969 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Hacking
Anonymous
2024-01-31 18:05:50
(2 years ago)
01/31/2024-19:05:50.646651 162.144.3.79 Protocol: 6 SURICATA TCP option invalid length
Hacking
π©πͺ
gnb
2024-01-31 18:05:30
(2 years ago)
2024-01-31T18:55:42.394511+01:00 atlas kernel: [14735972.424604] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ...
show more
2024-01-31T18:55:42.394511+01:00 atlas kernel: [14735972.424604] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=123 ID=10296 PROTO=TCP SPT=11320 DPT=22193 WINDOW=64240 RES=0x00 SYN URGP=0
2024-01-31T18:58:04.207193+01:00 atlas kernel: [14736114.237483] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=121 ID=21605 PROTO=TCP SPT=20581 DPT=10988 WINDOW=64240 RES=0x00 SYN URGP=0
2024-01-31T19:05:30.230561+01:00 atlas kernel: [14736560.259805] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=126 ID=42525 PROTO=TCP SPT=41501 DPT=55444 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Anonymous
2024-01-31 17:49:46
(2 years ago)
01/31/2024-18:49:45.951842 162.144.3.79 Protocol: 6 SURICATA TCP option invalid length
Hacking
Anonymous
2024-01-31 17:43:16
(2 years ago)
Jan 31 18:43:14 syscgn kernel: [1107426.056747] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e ...
show more
Jan 31 18:43:14 syscgn kernel: [1107426.056747] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e:7e:26:f1:c0:08:00 SRC=162.144.3.79 DST=185.194.141.106 LEN=80 TOS=0x00 PREC=0x00 TTL=124 ID=2648 PROTO=TCP SPT=3672 DPT=29905 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Hacking
π©πͺ
gnb
2024-01-31 17:27:25
(2 years ago)
2024-01-31T18:16:41.953598+01:00 atlas kernel: [14733631.983817] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ...
show more
2024-01-31T18:16:41.953598+01:00 atlas kernel: [14733631.983817] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=120 ID=12940 PROTO=TCP SPT=13964 DPT=19461 WINDOW=64240 RES=0x00 SYN URGP=0
2024-01-31T18:27:03.746548+01:00 atlas kernel: [14734253.774758] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=123 ID=41179 PROTO=TCP SPT=42203 DPT=56914 WINDOW=64240 RES=0x00 SYN URGP=0
2024-01-31T18:27:25.060882+01:00 atlas kernel: [14734275.091116] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=125 ID=54390 PROTO=TCP SPT=53366 DPT=43775 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Anonymous
2024-01-31 17:22:28
(2 years ago)
01/31/2024-18:22:27.807612 162.144.3.79 Protocol: 6 SURICATA TCP option invalid length
Hacking
Anonymous
2024-01-31 17:11:29
(2 years ago)
Jan 31 18:11:27 syscgn kernel: [1105519.024708] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e ...
show more
Jan 31 18:11:27 syscgn kernel: [1105519.024708] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e:7e:26:f1:c0:08:00 SRC=162.144.3.79 DST=185.194.141.106 LEN=80 TOS=0x00 PREC=0x00 TTL=126 ID=59466 PROTO=TCP SPT=60490 DPT=38595 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Hacking
πΊπΈ
en0
2024-01-31 17:03:20
(2 years ago)
162.144.3.79 was recorded 74 times by 5 hosts attempting to connect to 41 unique ports. Incident cou ...
show more
162.144.3.79 was recorded 74 times by 5 hosts attempting to connect to 41 unique ports. Incident counter (4h, 24h, all-time): 74, 818, 2251
show less
Port Scan
π©πͺ
gnb
2024-01-31 16:53:45
(2 years ago)
2024-01-31T17:43:21.780551+01:00 atlas kernel: [14731631.810887] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ...
show more
2024-01-31T17:43:21.780551+01:00 atlas kernel: [14731631.810887] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=122 ID=38012 PROTO=TCP SPT=36988 DPT=60149 WINDOW=64240 RES=0x00 SYN URGP=0
2024-01-31T17:48:16.357498+01:00 atlas kernel: [14731926.387862] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=124 ID=7892 PROTO=TCP SPT=6868 DPT=24669 WINDOW=64240 RES=0x00 SYN URGP=0
2024-01-31T17:53:44.842560+01:00 atlas kernel: [14732254.870778] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=162.144.3.79 DST=(redacted) LEN=80 TOS=0x00 PREC=0x00 TTL=125 ID=54390 PROTO=TCP SPT=53366 DPT=43775 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Anonymous
2024-01-31 16:51:29
(2 years ago)
01/31/2024-17:51:29.609569 162.144.3.79 Protocol: 6 SURICATA TCP option invalid length
Hacking