🇷🇴
Fn4ticHz
2026-05-29 02:47:01
(1 week ago)
DDoS blocked via ZeroGuard.ID
DDoS Attack
Exploited Host
🇷🇴
Fn4ticHz
2026-05-08 23:03:05
(4 weeks ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇩🇪
Packets-Decreaser.NET
2025-12-09 23:32:13
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇫🇷
sthoyer.de
2025-10-24 04:50:54
(7 months ago)
Oct 24 06:50:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Oct 24 06:50:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=202.154.18.12 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=30118 DF PROTO=TCP SPT=64749 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇦🇹
begou.dev
2025-10-16 06:28:55
(7 months ago)
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/445
Port Scan
🇳🇱
Study Bitcoin 🤗
2025-10-16 00:56:55
(7 months ago)
Port probe to tcp/445 (smb)
[srv135]
Port Scan
Hacking
🇩🇪
IP Analyzer
2025-10-12 02:00:26
(7 months ago)
Unauthorized connection attempt from IP address 202.154.18.12 on Port 445(SMB)
Port Scan
🇩🇪
Josef Matula
2025-10-12 00:59:07
(7 months ago)
ports, 445/24H:1/7D:1
Port Scan
2025-09-28 06:34:46
(8 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇫🇷
ericshim.me
2025-09-25 23:30:11
(8 months ago)
Dionaea honeypot SMB access at 2025-09-25T06:01:27.260167
Brute-Force
2025-09-23 06:38:33
(8 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇮🇩
hermawan
2025-05-28 03:24:38
(1 year ago)
[Wed May 28 09:28:46.995971 2025] [security2:error] [pid 39767:tid 140017401849536] [client 202.154. ...
show more
[Wed May 28 09:28:46.995971 2025] [security2:error] [pid 39767:tid 140017401849536] [client 202.154.18.12:40024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Download" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Download found within REQUEST_HEADERS:User-Agent: AndroidDownloadManager/10 (Linux; U; Android 10; vivo 1938 Build/QP1A.190711.020) request_line = GET /b/bulananlamongan.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananlamongan.pdf"] [unique_id "aDZ03q14X_gmuvYo1wNc8QAAAA4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[39813] [BXzM8LCWO7E] [aDZ03q14X_gmuvYo1wNc8QAAAA4] keep_alive=[0] [2025-05-28 09:28:46.995993] [R:aDZ03q14X_gmuvYo1wNc8QAAAA4] UA:'AndroidDownloadManager/10 (Linux; U; Android 10; vivo 1938 Build/QP1A.190711.020)' Host:'staklim
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-04-25 03:21:11
(1 year ago)
[Fri Apr 25 10:18:19.023724 2025] [security2:error] [pid 741213:tid 140514863072960] [client 202.154 ...
show more
[Fri Apr 25 10:18:19.023724 2025] [security2:error] [pid 741213:tid 140514863072960] [client 202.154.18.12:35366] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.*?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].*?[\\"'`]|(?:\\\\r?\\\\n)?\\\\z|[^\\"'`]+)|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]*?from|(?:alter|(?:(?:cre|trunc|upd)at|renam)e|d(?:e(?:lete|sc)|rop)|(?:inser|selec)t|load)[\\\\s\\\\x0b]*?\\\\([\\\\s\\\\x0b]*?space[\\\\s\\\\x0b]*?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2168"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/135.0.7049.100 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 13; CPH2217
...
show less
Hacking
Web App Attack
🇩🇪
nyuuzyou
2024-11-07 07:40:23
(1 year ago)
Intensive scraping: /web?s=%22Make%20sure%20you%20enter%20the%20%28%2A%29%20required%20information%2 ...
show more
Intensive scraping: /web?s=%22Make%20sure%20you%20enter%20the%20%28%2A%29%20required%20information%20where%20indicated.%22%20ai%20video%20maker&country=an-an&scraper=mojeek. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68.
show less
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2024-11-05 12:55:49
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam