🇨🇭
SOC [GOLINE SA]
2026-10-03 03:09:42
(1 day ago)
IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 45 === ATTACK === Signature: ...
show more
IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 45 === ATTACK === Signature: ET CINS Active Threat Intelligence Poor Reputation IP group 45 | SID: 2403344 | Severity: 2 | Category: Misc Attack === SOURCE === IP: 34.39.72.161 (IPv4) | Port: 45432 | Country: United Kingdom | ISP: GOOGL-2 | rDNS: 161.72.39.34.bc.googleusercontent.com === TARGET === Host: wireguard.goline.ch | IP: 185.54.80.7 | Port: 2121 | Protocol: TCP | App: N/A === RESPONSE === Time: 2026-10-03 05:09:41 | Action: Blocked
show less
Exploited Host
Hacking
🇨🇭
SOC [GOLINE SA]
2026-10-02 02:43:12
(2 days ago)
IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 45 === ATTACK === Signature: ...
show more
IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 45 === ATTACK === Signature: ET CINS Active Threat Intelligence Poor Reputation IP group 45 | SID: 2403344 | Severity: 2 | Category: Misc Attack === SOURCE === IP: 34.39.72.161 (IPv4) | Port: 45432 | Country: United Kingdom | ISP: GOOGL-2 | rDNS: 161.72.39.34.bc.googleusercontent.com === TARGET === Host: wireguard.goline.ch | IP: 185.54.80.7 | Port: 2121 | Protocol: TCP | App: N/A === RESPONSE === Time: 2026-10-02 04:43:12 | Action: Blocked
show less
Exploited Host
Hacking
🇺🇸
OceanTreasure
2026-10-01 19:20:54
(2 days ago)
tcp/2121; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 20 ...
show more
tcp/2121; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-10-01T10:45:51Z
show less
Port Scan
🇩🇪
xserverx.ru
2026-10-01 17:16:51
(2 days ago)
[UFW SCAN!!!!] SRC=34.39.72.161 LEN=40 TOS=0x00 PREC=0x00 TTL=249 PROTO=TCP SPT=45432 DPT=2121 WINDO ...
show more
[UFW SCAN!!!!] SRC=34.39.72.161 LEN=40 TOS=0x00 PREC=0x00 TTL=249 PROTO=TCP SPT=45432 DPT=2121 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇨🇿
Countryman
2026-10-01 17:07:22
(2 days ago)
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇩🇪
Jochen Pretli
2026-10-01 13:55:44
(2 days ago)
connection to honeypot
Email Spam
Port Scan
🇷🇺
dns.ipbd.tech
2026-10-01 13:48:07
(2 days ago)
nftables | Proto: TCP | Port: 2121 | Port scan
Port Scan
Hacking
🇫🇮
6kilowatti
2026-10-01 13:47:31
(2 days ago)
2026-10-01T16:47:30.701523+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ...
show more
2026-10-01T16:47:30.701523+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=34.39.72.161 DST=192.168.0.102 LEN=44 TOS=0x18 PREC=0x20 TTL=249 ID=30141 PROTO=TCP SPT=45432 DPT=2121 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇳🇱
StopAbuse
2026-10-01 13:17:47
(2 days ago)
tcp/2121
Port Scan
2026-10-01 13:14:22
(2 days ago)
Blocked by firewall on hugin [2121/tcp] | Rule: UFW | SPT: 45432 | TTL: 247 | LEN: 40 | TOS: 0x00 • ...
show more
Blocked by firewall on hugin [2121/tcp] | Rule: UFW | SPT: 45432 | TTL: 247 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
MPL
2026-10-01 11:06:44
(2 days ago)
tcp/2121 (12 or more attempts)
Port Scan
🇫🇷
vincent_EUDIER
2026-10-01 10:40:01
(2 days ago)
ET SCAN NMAP -sS window 1024
Port Scan
🇦🇹
Pingger Shikkoken
2026-10-01 09:41:09
(2 days ago)
2026-10-01T09:41:09+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ...
show more
2026-10-01T09:41:09+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.39.72.161 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x60 TTL=246 ID=3851 PROTO=TCP SPT=45432 DPT=2121 WINDOW=1024 RES=0x00 SYN URGP=0
show less
Hacking
🇨🇭
SOC [GOLINE SA]
2026-10-01 07:30:15
(2 days ago)
IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 45 === ATTACK === Signature: ...
show more
IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 45 === ATTACK === Signature: ET CINS Active Threat Intelligence Poor Reputation IP group 45 | SID: 2403344 | Severity: 2 | Category: Misc Attack === SOURCE === IP: 34.39.72.161 (IPv4) | Port: 45432 | Country: United Kingdom | ISP: GOOGL-2 | rDNS: 161.72.39.34.bc.googleusercontent.com === TARGET === Host: wireguard.goline.ch | IP: 185.54.80.7 | Port: 2121 | Protocol: TCP | App: N/A === RESPONSE === Time: 2026-10-01 09:30:14 | Action: Blocked
show less
Exploited Host
Hacking
🇸🇬
celestialcity
2026-10-01 07:15:03
(2 days ago)
Blocked by UFW on celestialcityas [2121/tcp] | SPT: 45432 | TTL: 242 | LEN: 40 | TOS: 0x00 • Reporte ...
show more
Blocked by UFW on celestialcityas [2121/tcp] | SPT: 45432 | TTL: 242 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
