Total reports
8 from
8 distinct
reporters
First reported
November 5th 2026
Most recent report
4 days ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
3
🇩🇪
Germany
1
🇪🇸
Spain
1
Most common categories
Port Scan
4
Brute-Force
2
Fraud VoIP
2
Hacking
2
DDoS Attack
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
NetGuard
2026-11-07 02:26:28
UTC ·
(4 days ago)
#honeypot #netguard247 #sentrypeer
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-11-05T18:30:02.403+00:00
Attacker IP: 34.18.57.219 | Port: 5060 | Country: Qatar
Honeypot: sentrypeer | Attack: unknown
Activity: 2 hits o ...
show more
#honeypot #netguard247 #sentrypeer
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-11-05T18:30:02.403+00:00
Attacker IP: 34.18.57.219 | Port: 5060 | Country: Qatar
Honeypot: sentrypeer | Attack: unknown
Activity: 2 hits on port 5060 between 2026-11-05T18:30:02.403+00:00 and 2026-11-05T18:30:02.429+00:00 (6h window 2026-11-05T18:00:00.000Z)
Source: NetGuard 24/7 (netguard24-7.com) | PhantomGrid Defense
show less
Web App Attack
🇪🇸
raiolanetworks.com
2026-11-05 23:39:43
UTC ·
(6 days ago)
Honeypot detection: SIP/VoIP fraud. 4 events observed. Reported automatically from a honeypot sensor.
Fraud VoIP
Brute-Force
🇩🇪
pscriptos
2026-11-05 22:00:20
UTC ·
(6 days ago)
DNS flooding on our DNS server: 125x united.com in 60s. Banned by Adguard Shield 🔗 https://git.techniverse.net/scriptos/adguard-shield.git
DDoS Attack
🇺🇸
ShadowWhisperer
2026-11-05 18:29:15
UTC ·
(6 days ago)
SIP port scan / probe. OPTIONS probe ua=
Port Scan
Fraud VoIP
2026-11-05 18:28:00
UTC ·
(6 days ago)
2026-11-05T13:13:57.917657-05:00 localhost kernel: [871317.226604] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=34.18.57.219 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=238 ID=55809 PROTO=UDP SPT=52920 DPT=1 ...
show more
2026-11-05T13:13:57.917657-05:00 localhost kernel: [871317.226604] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=34.18.57.219 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=238 ID=55809 PROTO=UDP SPT=52920 DPT=111 LEN=48
2026-11-05T13:13:57.917673-05:00 localhost kernel: [871317.226646] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=34.18.57.219 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=238 ID=55809 PROTO=UDP SPT=52920 DPT=111 LEN=48
2026-11-05T13:27:59.886746-05:00 localhost kernel: [872159.170416] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=34.18.57.219 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=235 ID=19672 PROTO=UDP SPT=52488 DPT=111 LEN=48
show less
Port Scan
🇫🇷
uthul
2026-11-05 18:25:33
UTC ·
(6 days ago)
T-Pot honeypot: 2 hits on ports [5060] (automated)
Port Scan
Hacking
🇮🇹
Francesco Ippoliti
2026-11-05 18:14:06
UTC ·
(6 days ago)
[Nov 5 19:14:04] NOTICE[362701] res_pjsip/pjsip_distributor.c: Request 'OPTIONS' from '<sip:1@1>' failed for '34.18.57.219:51268' (callid: 1) - No matching endpoint found
[Nov 5 19:14:05] NOTICE[362218] res_pjsip/pjsip_distributor.c: Request 'OPTIO ...
show more
[Nov 5 19:14:04] NOTICE[362701] res_pjsip/pjsip_distributor.c: Request 'OPTIONS' from '<sip:1@1>' failed for '34.18.57.219:51268' (callid: 1) - No matching endpoint found
[Nov 5 19:14:05] NOTICE[362218] res_pjsip/pjsip_distributor.c: Request 'OPTIONS' from '<sip:1@1>' failed for '34.18.57.219:49939' (callid: 1) - No matching endpoint found
...
show less
Brute-Force
Port Scan
🇹🇷
pashait
2026-11-05 15:25:00
UTC ·
(6 days ago)
Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (626 events in 5min) at 2026-11-05 15:24
Hacking
