๐ง๐ท
paradoxnetworks
2026-10-25 12:32:32
(3 days ago)
2026-10-25T12:29:26.562534+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[170712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.41.230.41 user=root
2026-10-25T12:29:28.827468+00:00 edge-con-sao01.int. ...
show more
2026-10-25T12:29:26.562534+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[170712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.41.230.41 user=root
2026-10-25T12:29:28.827468+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[170712]: Failed password for root from 198.41.230.41 port 55093 ssh2
2026-10-25T12:32:31.905425+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[171206]: Invalid user user from 198.41.230.41 port 61898
...
show less
Brute-Force
SSH
๐ง๐ช
madeit
2026-10-25 02:46:52
(4 days ago)
Web App Attack
๐ฉ๐ช
Jochen Pretli
2026-10-14 19:41:07
(2 weeks ago)
connection to honeypot
Email Spam
Port Scan
๐ง๐ท
paradoxnetworks
2026-10-09 04:27:35
(2 weeks ago)
2026-10-09T04:24:56.583906+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1092250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.41.230.41
2026-10-09T04:24:59.013915+00:00 edge-con-sao01.int.pdx.net.uk ...
show more
2026-10-09T04:24:56.583906+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1092250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.41.230.41
2026-10-09T04:24:59.013915+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1092250]: Failed password for invalid user debian from 198.41.230.41 port 51204 ssh2
2026-10-09T04:27:34.173004+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1092795]: Invalid user debian from 198.41.230.41 port 53486
...
show less
Brute-Force
SSH
๐บ๐ธ
MPL
2026-08-16 18:49:42
(2 months ago)
tcp/443 (5 or more attempts)
Port Scan
Anonymous
2025-08-16 12:38:10
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ฌ๐ง
no1knows.com
2025-06-03 06:04:44
(1 year ago)
2025/06/03 07:04:41 [error] 1357337#1357337: *102681 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 198.41.230.41, server: _, request: "GET /file.php HTTP/1.1", upstream: "fastcgi://unix:/run/php ...
show more
2025/06/03 07:04:41 [error] 1357337#1357337: *102681 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 198.41.230.41, server: _, request: "GET /file.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/06/03 07:04:41 [error] 1357337#1357337: *102681 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 198.41.230.41, server: _, request: "GET /index/function.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/06/03 07:04:42 [error] 1357337#1357337: *102681 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 198.41.230.41, server: _, request: "GET /.ll/.qiodetme.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
...
show less
Brute-Force
Bad Web Bot
Anonymous
2025-04-20 07:54:59
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-03-24 06:42:46
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ฆ
URAN Publishing Service
2025-03-02 08:50:22
(1 year ago)
198.41.230.41 - - [02/Mar/2025:10:50:18 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
198.41.230.41 - - [02/Mar/2025:10:50:21 +0200] "G ...
show more
198.41.230.41 - - [02/Mar/2025:10:50:18 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
198.41.230.41 - - [02/Mar/2025:10:50:21 +0200] "GET /wp-content/themes/tflow/ HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0"
...
show less
Web App Attack
Anonymous
2025-02-20 02:18:44
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ฆ
URAN Publishing Service
2025-02-03 08:48:31
(1 year ago)
198.41.230.41 - - [03/Feb/2025:10:47:36 +0200] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
198.41.230.41 - ...
show more
198.41.230.41 - - [03/Feb/2025:10:47:36 +0200] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
198.41.230.41 - - [03/Feb/2025:10:48:30 +0200] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
...
show less
Web App Attack
Anonymous
2025-01-15 08:18:44
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2024-12-24 13:35:43
(1 year ago)
[Tue Dec 24 14:35:32.223179 2024] [authz_core:error] [pid 3815] [client 198.41.230.41:37774] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Dec 24 14:35:38.789285 2024] [authz_core:error] [pid 1560] [client 198.41.230.41:24018 ...
show more
[Tue Dec 24 14:35:32.223179 2024] [authz_core:error] [pid 3815] [client 198.41.230.41:37774] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Dec 24 14:35:38.789285 2024] [authz_core:error] [pid 1560] [client 198.41.230.41:24018] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Dec 24 14:35:42.969800 2024] [authz_core:error] [pid 1560] [client 198.41.230.41:24018] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2024-12-19 11:18:33
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH