🇫🇮
nNordic
2026-06-09 10:19:14
(4 days ago)
Connection attempt blocked by IDS/IPS from 20.233.204.10/32
Hacking
🇺🇸
micropedro
2026-06-09 10:19:09
(4 days ago)
3 incidents: malicious activity. First: 2026-06-02 20:30, Last: 2026-06-09 06:19 UTC. Triggers: ufw- ...
show more
3 incidents: malicious activity. First: 2026-06-02 20:30, Last: 2026-06-09 06:19 UTC. Triggers: ufw-repeater.
show less
Port Scan
🇺🇸
micropedro
2026-06-03 00:30:46
(1 week ago)
3 incidents: malicious activity. First: 2026-05-19 19:45, Last: 2026-06-02 20:30 UTC. Triggers: ufw- ...
show more
3 incidents: malicious activity. First: 2026-05-19 19:45, Last: 2026-06-02 20:30 UTC. Triggers: ufw-repeater.
show less
Port Scan
🇺🇸
micropedro
2026-05-27 00:05:15
(2 weeks ago)
4 incidents: malicious activity. First: 2026-05-19 19:43, Last: 2026-05-26 20:05 UTC. Triggers: ufw- ...
show more
4 incidents: malicious activity. First: 2026-05-19 19:43, Last: 2026-05-26 20:05 UTC. Triggers: ufw-repeater.
show less
Port Scan
🇦🇹
Pingger Shikkoken
2026-05-22 01:06:35
(3 weeks ago)
2026-05-22T01:06:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ...
show more
2026-05-22T01:06:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=20.233.204.10 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=774 DF PROTO=TCP SPT=2496 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-22T01:06:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=20.233.204.10 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=110 ID=1 DF PROTO=TCP SPT=2496 DPT=6379 WINDOW=0 RES=0x00 ACK RST URGP=0
show less
Hacking
🇹🇷
Squearex
2026-05-21 07:30:33
(3 weeks ago)
Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 6379)
Brute-Force
SSH
🇩🇪
cheatmaster.store
2026-05-21 07:26:52
(3 weeks ago)
Automatic firewall detection.
Attacker IP: 20.233.204.10
Country: AE
City: Dubai
ORG: AS8075 Micros ...
show more
Automatic firewall detection.
Attacker IP: 20.233.204.10
Country: AE
City: Dubai
ORG: AS8075 Microsoft Corporation
UFW LOGS:
May 21 07:26:10 srv-23213 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=4a:63:06:71:79:3f:20:ed:47:e9:a1:42:08:00 SRC=20.233.204.10 DST=SERVER_IP_HIDDEN LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=21791 DF PROTO=TCP SPT=2496 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0
Server IP hidden for privacy.
Detected repeated unauthorized connection attempts and firewall blocks.
show less
Port Scan
Hacking
Brute-Force
SSH
🇩🇪
guldkage
2026-05-21 07:02:01
(3 weeks ago)
Unauthorized connection attempt detected from IP address 20.233.204.10 to port 6379 (ger-02) [REDIS]
Exploited Host
🇫🇷
EDSL
2026-05-21 06:51:58
(3 weeks ago)
[SRV-VPN1] Blocked by SysWarden Firewall (Database/Cache Attack)
Hacking
Brute-Force
Port Scan
2026-05-21 06:25:35
(3 weeks ago)
May 21 02:25:34 localhost kernel: [107690075.340541] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ...
show more
May 21 02:25:34 localhost kernel: [107690075.340541] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=20.233.204.10 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=56169 DF PROTO=TCP SPT=2496 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0
May 21 02:25:34 localhost kernel: [107690075.340557] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=20.233.204.10 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=56169 DF PROTO=TCP SPT=2496 DPT=6379 SEQ=2818605729 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405A00402080A2BD909350000000001030307)
show less
Port Scan
2026-05-20 19:54:38
(3 weeks ago)
2026-05-20T20:54:37.833811+01:00 vps kernel: [41047058.088774] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ...
show more
2026-05-20T20:54:37.833811+01:00 vps kernel: [41047058.088774] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=20.233.204.10 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=36 ID=14238 DF PROTO=TCP SPT=2496 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
🇺🇸
dmsec
2026-05-20 19:26:06
(3 weeks ago)
The IP 20.233.204.10 is scanning a server on port 6379. Attack at: 2026-05-20 16:26 (yyyy/MM/dd HH:m ...
show more
The IP 20.233.204.10 is scanning a server on port 6379. Attack at: 2026-05-20 16:26 (yyyy/MM/dd HH:mm) UTC -3.
show less
Port Scan
🇩🇪
genokrad
2026-05-20 11:45:37
(3 weeks ago)
Unauthorized connection attempt on TCP/6379 (Redis)
Port Scan
🇩🇪
manuelisus
2026-05-19 23:26:52
(3 weeks ago)
Honeypot REDIS: +10: honeypot_connection, +15: short_automated_session, +20: redis_info_recon, +15: ...
show more
Honeypot REDIS: +10: honeypot_connection, +15: short_automated_session, +20: redis_info_recon, +15: cloud_provider_Azure, +10: os_server_linux
show less
Hacking
🇩🇪
kingjan1999
2026-05-19 22:47:03
(3 weeks ago)
Blocked by UFW [6379/tcp] | SPT: 2496 | TTL: 47 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefi ...
show more
Blocked by UFW [6379/tcp] | SPT: 2496 | TTL: 47 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan