๐ฉ๐ช
CELOS-SOC
2026-10-19 10:30:58
(1 day ago)
Multiple Unauthorized VPN Login Attempts
Hacking
Brute-Force
Anonymous
2026-10-19 09:57:11
(1 day ago)
Repeated SSL-VPN login attempts detected.
Brute-Force
๐จ๐ญ
SOC [GOLINE SA]
2026-10-19 09:33:28
(1 day ago)
[RoutePulse | 2026-10-19T09:33:28Z | RTBH-INJECTED]
ATTACK CLASS: vpn_bruteforce
SOURCE: 169.150.211 ...
show more
[RoutePulse | 2026-10-19T09:33:28Z | RTBH-INJECTED]
ATTACK CLASS: vpn_bruteforce
SOURCE: 169.150.211.217
EVIDENCE: Shunned on the Cisco FTD VPN gateway โ Cisco VPN RA Brute force on Cisco FTDv โ slow spray: 4 failed logins over 1 h (one every ~9 min, under every 15-min threshold and the FTD hold-down) โ rung 1-bis (doc 247 ยง10.2)
DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring
ACTION: BGP null route injected at RoutePulse network edge
show less
Brute-Force
Hacking
๐จ๐ฟ
Countryman
2026-10-19 09:29:45
(1 day ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
Anonymous
2026-10-19 09:13:00
(1 day ago)
Access from IP address '169.150.211.217' is blocked for '45' minutes after '3' unsuccessful login at ...
show more
Access from IP address '169.150.211.217' is blocked for '45' minutes after '3' unsuccessful login attempts
show less
Brute-Force
Hacking
๐ช๐ธ
librebit
2026-10-19 08:17:10
(1 day ago)
RDWeb scan
Web App Attack
๐ฉ๐ช
sojan
2026-10-18 05:58:25
(2 days ago)
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=943 DPT=943 DPT=943
Port Scan
๐จ๐ฟ
lp
2026-10-13 21:20:08
(1 week ago)
Unauthorized VPN login attempts: 14 attempts were recorded from 169.150.211.217
2026-10-13T21:59:25+ ...
show more
Unauthorized VPN login attempts: 14 attempts were recorded from 169.150.211.217
2026-10-13T21:59:25+02:00 vpn Access-Reject 'marysat' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T22:06:50+02:00 vpn Access-Reject 'pivasek.czech' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T22:06:53+02:00 vpn Access-Reject '[email protected] ' station: 169.150.211.217 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T22:09:22+02:00 vpn Access-Reject 'info' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T22:09:23+02:00 vpn Access-Reject '[email protected] ' station: 1
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2026-10-13 19:50:22
(1 week ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 169.150.211.217
2026-10-13T21:31:21+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 169.150.211.217
2026-10-13T21:31:21+02:00 vpn Access-Reject 'tomas.mokrejs' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T21:31:26+02:00 vpn Access-Reject '[email protected] ' station: 169.150.211.217 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2026-10-13 07:50:20
(1 week ago)
Unauthorized VPN login attempts: 13 attempts were recorded from 169.150.211.217
2026-10-13T08:15:04+ ...
show more
Unauthorized VPN login attempts: 13 attempts were recorded from 169.150.211.217
2026-10-13T08:15:04+02:00 vpn Access-Reject 'info' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T08:15:06+02:00 vpn Access-Reject '[email protected] ' station: 169.150.211.217 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T08:20:52+02:00 vpn Access-Reject 'asipierowska' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T08:20:54+02:00 vpn Access-Reject '[email protected] ' station: 169.150.211.217 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-13T08:34:42+02:00 vpn Access-Reject 'jarosjakub42' station
show less
Brute-Force
Web App Attack
Anonymous
2026-10-13 06:12:00
(1 week ago)
Access from IP address '169.150.211.217' is blocked for '45' minutes after '3' unsuccessful login at ...
show more
Access from IP address '169.150.211.217' is blocked for '45' minutes after '3' unsuccessful login attempts
show less
Brute-Force
Hacking
๐จ๐ฟ
lp
2026-10-10 18:19:50
(1 week ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 169.150.211.217
2026-10-10T18:56:11+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 169.150.211.217
2026-10-10T18:56:11+02:00 vpn Access-Reject 'o.kouba' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-10T18:56:13+02:00 vpn Access-Reject '[email protected] ' station: 169.150.211.217 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2026-10-10 15:33:08
(1 week ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 169.150.211.217
2026-10-10T17:25:55+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 169.150.211.217
2026-10-10T17:25:55+02:00 vpn Access-Reject 'mateotichy' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-10T17:25:57+02:00 vpn Access-Reject '[email protected] ' station: 169.150.211.217 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2026-10-09 15:19:58
(1 week ago)
Unauthorized VPN login attempts: 6 attempts were recorded from 169.150.211.217
2026-10-09T15:50:35+0 ...
show more
Unauthorized VPN login attempts: 6 attempts were recorded from 169.150.211.217
2026-10-09T15:50:35+02:00 vpn Access-Reject 'vana.zafiroski' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-09T16:25:52+02:00 vpn Access-Reject 'arnie' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-09T16:54:10+02:00 vpn Access-Reject 'peter.nedorostek' station: 169.150.211.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-09T16:54:12+02:00 vpn Access-Reject '[email protected] ' station: 169.150.211.217 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-09T17:02:47+02:00 vpn Access-Reject 'cgi' station: 169.15
show less
Brute-Force
Web App Attack
๐ฉ๐ช
bancix
2026-10-09 15:02:02
(1 week ago)
Heimdallr NIDS: Automatic ban triggered. Reason: PORT_SWEEP_DETECTED (5 porte uniche in 10s)
Port Scan