2026-07-02 11:34:31
(1 week ago)
Port scan / connection attempts on port 53/UDP to unused IP
Port Scan
🇿🇦
rb-sys
2026-05-23 10:47:06
(1 month ago)
2026-05-23T10:47:06.431851+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb: ...
show more
2026-05-23T10:47:06.431851+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb:d3:b1:0a:77:08:00 SRC=207.154.221.51 DST=102.214.10.82 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=14293 DF PROTO=TCP SPT=39025 DPT=53 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇿🇦
rb-sys
2026-05-21 12:19:29
(1 month ago)
2026-05-21T12:19:28.655484+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb: ...
show more
2026-05-21T12:19:28.655484+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb:d3:b1:0a:77:08:00 SRC=207.154.221.51 DST=102.214.10.82 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=9619 DF PROTO=TCP SPT=45737 DPT=53 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇿🇦
rb-sys
2026-05-20 11:44:20
(1 month ago)
2026-05-20T11:44:19.961855+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb: ...
show more
2026-05-20T11:44:19.961855+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb:d3:b1:0a:77:08:00 SRC=207.154.221.51 DST=102.214.10.82 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=4158 DF PROTO=TCP SPT=42777 DPT=53 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇿🇦
rb-sys
2026-05-19 08:46:26
(1 month ago)
2026-05-19T08:46:26.689271+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb: ...
show more
2026-05-19T08:46:26.689271+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb:d3:b1:0a:77:08:00 SRC=207.154.221.51 DST=102.214.10.82 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=19132 DF PROTO=TCP SPT=33971 DPT=53 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇩🇪
moretrix
2026-05-07 22:49:22
(2 months ago)
2026-05-08T00:49:18.018931+02:00 ieyasu.moretrix.com named[1389]: client @0x7fcfded54000 207.154.221 ...
show more
2026-05-08T00:49:18.018931+02:00 ieyasu.moretrix.com named[1389]: client @0x7fcfded54000 207.154.221.51#18232 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match)
2026-05-08T00:49:19.855635+02:00 ieyasu.moretrix.com named[1389]: client @0x7fcfe8256c00 207.154.221.51#36401 (worldshake.org): view external: query (cache) 'worldshake.org/AAAA/IN' denied (allow-query-cache did not match)
2026-05-08T00:49:21.553984+02:00 ieyasu.moretrix.com named[1389]: client @0x7fcfe45f6000 207.154.221.51#10627 (worldshake.org): view external: query (cache) 'worldshake.org/MX/IN' denied (allow-query-cache did not match)
...
show less
Brute-Force
🇹🇷
Guardpot
2026-04-02 13:48:51
(3 months ago)
This IP address has been observed conducting malicious activity across 147 events involving 1 differ ...
show more
This IP address has been observed conducting malicious activity across 147 events involving 1 different attack vectors, first seen on 2024-04-23 10:09 UTC and last active on 2026-04-02 13:48 UTC. Observed activity includes: DNS abuse: recursive query exploitation, zone transfer attempts, or DNS tunneling (147 events). Reported by Guardpot.
show less
DNS Compromise
🇩🇪
moretrix
2026-02-21 11:59:16
(4 months ago)
2026-02-21T12:58:56.747437+01:00 ieyasu.moretrix.com named[1285]: client @0x7f7ba9342400 207.154.221 ...
show more
2026-02-21T12:58:56.747437+01:00 ieyasu.moretrix.com named[1285]: client @0x7f7ba9342400 207.154.221.51#5563 (worldshake.org): view external: query (cache) 'worldshake.org/A/IN' denied (allow-query-cache did not match)
2026-02-21T12:59:10.925428+01:00 ieyasu.moretrix.com named[1285]: client @0x7f7ba935d000 207.154.221.51#40572 (worldshake.org): view external: query (cache) 'worldshake.org/SOA/IN' denied (allow-query-cache did not match)
2026-02-21T12:59:15.785760+01:00 ieyasu.moretrix.com named[1285]: client @0x7f7bb216a800 207.154.221.51#13773 (worldshake.org): view external: query (cache) 'worldshake.org/TXT/IN' denied (allow-query-cache did not match)
...
show less
Brute-Force
🇬🇧
NotCool
2025-09-19 01:57:41
(9 months ago)
(bind) bind triggered by 207.154.221.51 (DE/Germany/-): 10 in the last 3600 secs
DDoS Attack
🇩🇪
xortex
2025-09-13 17:27:12
(9 months ago)
several attempts to forbidden dns queries or transfers, exceeded rate limiting
DNS Compromise
DNS Poisoning
🇩🇪
debaba
2025-06-13 06:58:30
(1 year ago)
3
DNS Poisoning
🇩🇪
spyra.rocks
2025-04-30 01:20:51
(1 year ago)
NAMED
DDoS Attack
🇩🇪
spyra.rocks
2025-04-25 02:00:11
(1 year ago)
NAMED
DDoS Attack
🇩🇪
spyra.rocks
2025-04-23 01:25:33
(1 year ago)
NAMED
DDoS Attack
🇩🇪
spyra.rocks
2025-04-21 23:48:08
(1 year ago)
NAMED
DDoS Attack