🇨🇭
Mario Bretscher
2026-05-28 06:00:13
(1 week ago)
28-May-2026 07:59:50.409 security: info: client @0x786ea41b3228 170.64.159.130#1448 (ns2.letsbuild.c ...
show more
28-May-2026 07:59:50.409 security: info: client @0x786ea41b3228 170.64.159.130#1448 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/A/IN' denied
28-May-2026 07:59:50.411 security: info: client @0x786eac2174e8 170.64.159.130#1478 (ns4.letsbuild.ch): view Extern: query 'ns4.letsbuild.ch/A/IN' denied
28-May-2026 07:59:50.411 security: info: client @0x786eb02137f8 170.64.159.130#1460 (ns4.letsbuild.ch): view Extern: query 'ns4.letsbuild.ch/A/IN' denied
28-May-2026 07:59:50.411 security: info: client @0x786eb9ed3da8 170.64.159.130#1472 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied
28-May-2026 07:59:50.412 security: info: client @0x786ea42f11e8 170.64.159.130#1442 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/A/IN' denied
...
show less
Web App Attack
2026-05-28 02:47:32
(1 week ago)
DNS AXFR Attempt
DNS Compromise
🇫🇮
nNordic
2026-04-25 08:43:50
(1 month ago)
Connection attempt blocked by IDS/IPS from 170.64.159.130/32
Hacking
🇭🇰
pengpeng
2026-04-04 03:04:39
(2 months ago)
monitor: on ser162528253480 | port: 222 | ttl: 56 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇦🇹
centurion
2026-04-04 01:51:27
(2 months ago)
Blocked by UFW on cloud [2022/tcp]
Source port: 54757
TTL: 44
Packet length: 52
TOS: 0x00
This repo ...
show more
Blocked by UFW on cloud [2022/tcp]
Source port: 54757
TTL: 44
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
MPL
2026-04-04 01:49:35
(2 months ago)
tcp/2022
Port Scan
🇺🇸
COMPLEX
2026-04-04 01:29:24
(2 months ago)
Unsolicited TCP traffic | Action: DROP | Port 2022
Brute-Force
2026-04-04 01:04:05
(2 months ago)
Portscan: TCP/2202 (6x), TCP/222 (37x)
Port Scan
🇬🇧
andypiper
2026-04-04 01:01:47
(2 months ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇺🇸
MPL
2026-04-04 01:00:46
(2 months ago)
tcp/2022 (26 or more attempts)
Port Scan
🇺🇸
technash
2026-04-04 00:07:40
(2 months ago)
Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortin ...
show more
Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel]. Deny/drop traffic.
show less
Port Scan
🇫🇷
Steph@
2026-04-03 23:56:02
(2 months ago)
Apr 4 01:55:43 srv4 sshd[3171422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Apr 4 01:55:43 srv4 sshd[3171422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.159.130 user=root
Apr 4 01:55:46 srv4 sshd[3171422]: Failed password for root from 170.64.159.130 port 46402 ssh2
Apr 4 01:55:59 srv4 sshd[3171432]: Invalid user czb from 170.64.159.130 port 48470
Apr 4 01:55:59 srv4 sshd[3171432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.159.130
Apr 4 01:56:02 srv4 sshd[3171432]: Failed password for invalid user czb from 170.64.159.130 port 48470 ssh2
...
show less
Brute-Force
SSH
🇩🇪
mxpgmbh
2026-04-03 23:55:48
(2 months ago)
2026-04-04T00:55:30.084063+01:00 **** sshd-session[34918]: pam_unix(sshd:auth): authentication failu ...
show more
2026-04-04T00:55:30.084063+01:00 **** sshd-session[34918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.159.130 user=root
2026-04-04T00:55:32.560744+01:00 **** sshd-session[34918]: Failed password for root from 170.64.159.130 port 52762 ssh2
2026-04-04T00:55:45.163205+01:00 **** sshd-session[34992]: Invalid user **** from 170.64.159.130 port 36370
2026-04-04T00:55:45.430625+01:00 **** sshd-session[34992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.159.130
2026-04-04T00:55:47.545522+01:00 **** sshd-session[34992]: Failed password for invalid user **** from 170.64.159.130 port 36370 ssh2
show less
Brute-Force
SSH
🇺🇸
egulatee
2026-04-03 23:55:46
(2 months ago)
sshd jail triggered on ip-208-84-100-178.my-advin.com
Brute-Force
SSH
🇩🇪
tinect
2026-04-03 23:55:40
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf
SSH
Brute-Force