๐ฎ๐ฑ
spd.co.il
2026-06-06 09:01:20
(2 weeks ago)
Port scan detected on multiple ports
Port Scan
๐ฉ๐ช
gnb
2026-06-04 21:11:36
(3 weeks ago)
2026-06-04T23:08:31.166790+02:00 atlas kernel: [46445963.119110] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ...
show more
2026-06-04T23:08:31.166790+02:00 atlas kernel: [46445963.119110] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=185.132.127.69 DST=(redacted) LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=10015 PROTO=TCP SPT=61234 DPT=5992 WINDOW=1025 RES=0x00 SYN URGP=0
2026-06-04T23:09:41.195121+02:00 atlas kernel: [46446033.147320] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=185.132.127.69 DST=(redacted) LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=32099 PROTO=TCP SPT=61234 DPT=5995 WINDOW=1025 RES=0x00 SYN URGP=0
2026-06-04T23:11:35.880062+02:00 atlas kernel: [46446147.831961] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=185.132.127.69 DST=(redacted) LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=44610 PROTO=TCP SPT=61234 DPT=5920 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐ฉ๐ช
ISPLtd
2026-06-04 10:48:20
(3 weeks ago)
Jun 4 07:47:51 185.132.127.69 TCP SPT=61234 DPT=5991 SYN
Jun 4 07:47:58 185.132.127.69 TCP SPT=612 ...
show more
Jun 4 07:47:51 185.132.127.69 TCP SPT=61234 DPT=5991 SYN
Jun 4 07:47:58 185.132.127.69 TCP SPT=61234 DPT=5921 SYN
Jun 4 07:48:19 185.132.127.69 TCP SPT=61234 DPT=5910
...
show less
Port Scan
๐บ๐ธ
ISPLtd
2026-06-04 09:34:40
(3 weeks ago)
Jun 4 03:33:50 185.132.127.69 TCP SPT=61234 DPT=5931 SYN
Jun 4 03:33:51 185.132.127.69 TCP SPT=612 ...
show more
Jun 4 03:33:50 185.132.127.69 TCP SPT=61234 DPT=5931 SYN
Jun 4 03:33:51 185.132.127.69 TCP SPT=61234 DPT=5976 SYN
Jun 4 03:34:39 185.132.127.69 TCP SPT=61234 DPT=6000
...
show less
Port Scan
Anonymous
2026-06-04 04:47:35
(3 weeks ago)
...
Web App Attack
๐ฉ๐ช
phil2k
2026-06-04 04:23:32
(3 weeks ago)
fail2ban:firewall:2026-06-04T06:23:00.819952+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ...
show more
fail2ban:firewall:2026-06-04T06:23:00.819952+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=185.132.127.69 DST=<ANONYMIZED_IP> LEN=44 TOS=0x08 PREC=0x20 TTL=243 ID=44243 PROTO=TCP SPT=61234 DPT=5906 WINDOW=1025 RES=0x00 SYN URGP=0
2026-06-04T06:23:30.342197+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=185.132.127.69 DST=<ANONYMIZED_IP> LEN=44 TOS=0x08 PREC=0x20 TTL=243 ID=15470 PROTO=TCP SPT=61234 DPT=5951 WINDOW=1025 RES=0x00 SYN URGP=0
show less
DDoS Attack
Port Scan
๐ซ๐ท
sthoyer.de
2026-06-04 01:57:25
(3 weeks ago)
Jun 4 03:57:23 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ...
show more
Jun 4 03:57:23 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.132.127.69 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=15752 PROTO=TCP SPT=61234 DPT=5944 WINDOW=1025 RES=0x00 SYN URGP=0
Jun 4 03:57:24 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.132.127.69 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=48369 PROTO=TCP SPT=61234 DPT=5919 WINDOW=1025 RES=0x00 SYN URGP=0
Jun 4 03:57:24 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.132.127.69 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=48369 PROTO=TCP SPT=61234 DPT=5919 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
Anonymous
2026-06-04 01:30:07
(3 weeks ago)
Triggered: repeated knocking on closed ports.
Port Scan
๐ฌ๐ง
WebNiraj
2026-06-04 01:11:40
(3 weeks ago)
*Port Scan* detected from 185.132.127.69 (SE/Sweden/server.stenskivor.se). 11 hits in the last 260 s ...
show more
*Port Scan* detected from 185.132.127.69 (SE/Sweden/server.stenskivor.se). 11 hits in the last 260 seconds [SIGMA]
show less
Brute-Force
Port Scan
๐ซ๐ท
sthoyer.de
2026-06-04 01:10:29
(3 weeks ago)
Jun 4 03:07:30 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ...
show more
Jun 4 03:07:30 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.132.127.69 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=64475 PROTO=TCP SPT=61234 DPT=5948 WINDOW=1025 RES=0x00 SYN URGP=0
Jun 4 03:08:59 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.132.127.69 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=37366 PROTO=TCP SPT=61234 DPT=5971 WINDOW=1025 RES=0x00 SYN URGP=0
Jun 4 03:09:34 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.132.127.69 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=64352 PROTO=TCP SPT=61234 DPT=5943 WINDOW=1025 RES=0x00 SYN URGP=0
Jun 4 03:09:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.132.127.69 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=40001 PROTO=TCP SPT=61234 DPT=5914 WINDOW=1025 R
...
show less
Port Scan
๐ซ๐ท
ISPLtd
2026-06-04 01:09:18
(3 weeks ago)
Jun 3 22:08:55 185.132.127.69 TCP SPT=61234 DPT=5988 SYN
Jun 3 22:09:08 185.132.127.69 TCP SPT=612 ...
show more
Jun 3 22:08:55 185.132.127.69 TCP SPT=61234 DPT=5988 SYN
Jun 3 22:09:08 185.132.127.69 TCP SPT=61234 DPT=5900 SYN
Jun 3 22:09:17 185.132.127.69 TCP SPT=61234 DPT=5949
...
show less
Port Scan
๐ซ๐ท
Little Iguana
2026-06-04 01:08:25
(3 weeks ago)
trying to access non-authorized port
Port Scan
Anonymous
2026-06-04 00:53:09
(3 weeks ago)
Hit honeypot r.
Port Scan
Hacking
Exploited Host
Anonymous
2026-06-04 00:42:50
(3 weeks ago)
Try to connect to Port_Scan_5900_stealth
Port Scan
๐ซ๐ท
Hiigara
2026-06-04 00:01:32
(3 weeks ago)
connection attempt : 185.132.127.69 on port : tcp/5985 (WinRM HTTP)
Port Scan