🇩🇪
phil2k
2026-11-14 22:04:34
UTC ·
(22 hours ago)
UDP portscan or auth bruteforce on ports: domain :
Firewall: Within 2026-11-14 23:04:23 - 2026-11-14 23:04:23 CET(+0100) identified:
Fail2ban: Within 2026-11-13 22:07:22 - 2026-11-13 22:07:23 CET(+0100) banned: 5 times by fail2ban[<DNS-SERV>-refused ...
show more
UDP portscan or auth bruteforce on ports: domain :
Firewall: Within 2026-11-14 23:04:23 - 2026-11-14 23:04:23 CET(+0100) identified:
Fail2ban: Within 2026-11-13 22:07:22 - 2026-11-13 22:07:23 CET(+0100) banned: 5 times by fail2ban[<DNS-SERV>-refused]; 5 times by fail2ban[recidive]
show less
Port Scan
Brute-Force
🇩🇪
phil2k
2026-11-13 21:07:26
UTC ·
(1 day ago)
fail2ban:<DNS-SERV>-refused:13-Nov-2026 22:07:22.773 security: info: client @0x<ANONYMIZED_MAC> 5.104.108.119#59088 (interventiisecuritate.ro): query (cache) 'interventiisecuritate.ro/NS/IN' denied (allow-query-cache did not match)
Port Scan
2026-06-30 19:37:23
UTC ·
(4 months ago)
Port scan on port 53/UDP to unused IP
Port Scan
🇨🇭
Mario Bretscher
2026-06-29 04:39:35
UTC ·
(4 months ago)
29-Jun-2026 06:39:34.335 security: info: client @0x7ae1bc0b1dc8 5.104.108.119#33932 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied
29-Jun-2026 06:39:34.337 security: info: client @0x7ae1b00c2408 5.104.108.119#46945 (ns3.letsbui ...
show more
29-Jun-2026 06:39:34.335 security: info: client @0x7ae1bc0b1dc8 5.104.108.119#33932 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied
29-Jun-2026 06:39:34.337 security: info: client @0x7ae1b00c2408 5.104.108.119#46945 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/AAAA/IN' denied
29-Jun-2026 06:39:34.355 security: info: client @0x7ae1bc0b1dc8 5.104.108.119#56969 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/AAAA/IN' denied
29-Jun-2026 06:39:34.357 security: info: client @0x7ae1b00c2408 5.104.108.119#33550 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/AAAA/IN' denied
29-Jun-2026 06:39:34.357 security: info: client @0x7ae1ac0564f8 5.104.108.119#54427 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/AAAA/IN' denied
...
show less
Web App Attack
🇨🇭
Mario Bretscher
2026-05-22 12:54:48
UTC ·
(5 months ago)
22-May-2026 14:54:46.753 security: info: client @0x786eac0068a8 5.104.108.119#36270 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/A/IN' denied
22-May-2026 14:54:46.753 security: info: client @0x786eb9cc7f68 5.104.108.119#40830 (ns1.letsbui ...
show more
22-May-2026 14:54:46.753 security: info: client @0x786eac0068a8 5.104.108.119#36270 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/A/IN' denied
22-May-2026 14:54:46.753 security: info: client @0x786eb9cc7f68 5.104.108.119#40830 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/AAAA/IN' denied
22-May-2026 14:54:46.754 security: info: client @0x786eac0068a8 5.104.108.119#40963 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/AAAA/IN' denied
22-May-2026 14:54:46.758 security: info: client @0x786ea4023008 5.104.108.119#59663 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied
22-May-2026 14:54:46.759 security: info: client @0x786eb0037958 5.104.108.119#48020 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/A/IN' denied
...
show less
Web App Attack
🇿🇦
rb-sys
2026-05-21 04:48:23
UTC ·
(5 months ago)
2026-05-21T04:48:22.469578+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb:d3:b1:0a:77:08:00 SRC=5.104.108.119 DST=102.214.10.82 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=22123 DF PROTO=TCP SPT=44273 DPT=53 WINDOW=64660 RES=0x00 SY ...
show more
2026-05-21T04:48:22.469578+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb:d3:b1:0a:77:08:00 SRC=5.104.108.119 DST=102.214.10.82 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=22123 DF PROTO=TCP SPT=44273 DPT=53 WINDOW=64660 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇿🇦
rb-sys
2026-05-18 06:03:57
UTC ·
(5 months ago)
2026-05-18T06:03:57.378801+00:00 rbdns kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:65:b4:ae:e8:eb:d3:b1:0a:77:08:00 SRC=5.104.108.119 DST=102.214.10.82 LEN=85 TOS=0x00 PREC=0x00 TTL=52 ID=6501 PROTO=UDP SPT=37716 DPT=53 LEN=65
...
Port Scan
🇨🇭
Mario Bretscher
2026-05-15 02:02:32
UTC ·
(6 months ago)
15-May-2026 04:02:30.733 security: info: client @0x74ae3dd13d28 5.104.108.119#33258 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/AAAA/IN' denied
15-May-2026 04:02:30.735 security: info: client @0x74ae3dd13d28 5.104.108.119#56263 (ns1.lets ...
show more
15-May-2026 04:02:30.733 security: info: client @0x74ae3dd13d28 5.104.108.119#33258 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/AAAA/IN' denied
15-May-2026 04:02:30.735 security: info: client @0x74ae3dd13d28 5.104.108.119#56263 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/A/IN' denied
15-May-2026 04:02:30.735 security: info: client @0x74ae24192758 5.104.108.119#48769 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/A/IN' denied
15-May-2026 04:02:30.736 security: info: client @0x74ae3dd13d28 5.104.108.119#39653 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied
15-May-2026 04:02:30.736 security: info: client @0x74ae3400e018 5.104.108.119#49288 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/AAAA/IN' denied
...
show less
Web App Attack
🇨🇭
Mario Bretscher
2026-05-06 00:03:29
UTC ·
(6 months ago)
06-May-2026 02:03:28.311 security: info: client @0x74ae3dd13d28 5.104.108.119#35853 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied
06-May-2026 02:03:28.313 security: info: client @0x74ae3dd13d28 5.104.108.119#43343 (hades.l ...
show more
06-May-2026 02:03:28.311 security: info: client @0x74ae3dd13d28 5.104.108.119#35853 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied
06-May-2026 02:03:28.313 security: info: client @0x74ae3dd13d28 5.104.108.119#43343 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied
06-May-2026 02:03:28.330 security: info: client @0x74ae200db968 5.104.108.119#38068 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/AAAA/IN' denied
06-May-2026 02:03:28.332 security: info: client @0x74ae3dd13d28 5.104.108.119#54449 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/AAAA/IN' denied
06-May-2026 02:03:28.332 security: info: client @0x74ae3dd17a28 5.104.108.119#34063 (ns4.letsbuild.ch): view Extern: query 'ns4.letsbuild.ch/AAAA/IN' denied
...
show less
Web App Attack
🇨🇭
Mario Bretscher
2026-04-30 15:48:26
UTC ·
(6 months ago)
30-Apr-2026 17:48:24.592 security: info: client @0x761b2c161b48 5.104.108.119#53998 (net.letsbuild.ch): view Extern: query 'net.letsbuild.ch/NS/IN' denied
30-Apr-2026 17:48:24.694 security: info: client @0x761b3416a7a8 5.104.108.119#52136 (hades.net. ...
show more
30-Apr-2026 17:48:24.592 security: info: client @0x761b2c161b48 5.104.108.119#53998 (net.letsbuild.ch): view Extern: query 'net.letsbuild.ch/NS/IN' denied
30-Apr-2026 17:48:24.694 security: info: client @0x761b3416a7a8 5.104.108.119#52136 (hades.net.letsbuild.ch): view Extern: query 'hades.net.letsbuild.ch/AAAA/IN' denied
30-Apr-2026 17:48:24.710 security: info: client @0x761b3416a7a8 5.104.108.119#53055 (hades.net.letsbuild.ch): view Extern: query 'hades.net.letsbuild.ch/A/IN' denied
30-Apr-2026 17:48:24.710 security: info: client @0x761b2c161b48 5.104.108.119#34313 (ns4.letsbuild.ch): view Extern: query 'ns4.letsbuild.ch/AAAA/IN' denied
30-Apr-2026 17:48:24.711 security: info: client @0x761b341503b8 5.104.108.119#56510 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/AAAA/IN' denied
...
show less
Web App Attack
🇨🇭
Mario Bretscher
2026-04-30 14:32:55
UTC ·
(6 months ago)
30-Apr-2026 16:32:53.924 security: info: client @0x761b38229658 5.104.108.119#37899 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/A/IN' denied
30-Apr-2026 16:32:53.926 security: info: client @0x761b38229658 5.104.108.119#58850 (ns3.letsbui ...
show more
30-Apr-2026 16:32:53.924 security: info: client @0x761b38229658 5.104.108.119#37899 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/A/IN' denied
30-Apr-2026 16:32:53.926 security: info: client @0x761b38229658 5.104.108.119#58850 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied
30-Apr-2026 16:32:53.926 security: info: client @0x761b41e499d8 5.104.108.119#38668 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/A/IN' denied
30-Apr-2026 16:32:53.927 security: info: client @0x761b41e65548 5.104.108.119#43443 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/AAAA/IN' denied
30-Apr-2026 16:32:53.928 security: info: client @0x761b2c11b498 5.104.108.119#42350 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/AAAA/IN' denied
...
show less
Web App Attack
🇨🇭
Mario Bretscher
2026-04-23 17:20:45
UTC ·
(6 months ago)
23-Apr-2026 19:20:43.999 security: info: client @0x761b41f9c0c8 5.104.108.119#52542 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/A/IN' denied
23-Apr-2026 19:20:44.001 security: info: client @0x761b3801b388 5.104.108.119#60550 (ns1.letsbui ...
show more
23-Apr-2026 19:20:43.999 security: info: client @0x761b41f9c0c8 5.104.108.119#52542 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/A/IN' denied
23-Apr-2026 19:20:44.001 security: info: client @0x761b3801b388 5.104.108.119#60550 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/AAAA/IN' denied
23-Apr-2026 19:20:44.001 security: info: client @0x761b38235ea8 5.104.108.119#55005 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/AAAA/IN' denied
23-Apr-2026 19:20:44.002 security: info: client @0x761b38235ea8 5.104.108.119#50955 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/A/IN' denied
23-Apr-2026 19:20:44.002 security: info: client @0x761b3801b388 5.104.108.119#45363 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/A/IN' denied
...
show less
Web App Attack
🇨🇭
Mario Bretscher
2026-03-25 05:01:36
UTC ·
(7 months ago)
25-Mar-2026 06:01:34.718 security: info: client @0x70889407b758 5.104.108.119#48577 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied
25-Mar-2026 06:01:34.720 security: info: client @0x708878016528 5.104.108.119#37034 (hades.l ...
show more
25-Mar-2026 06:01:34.718 security: info: client @0x70889407b758 5.104.108.119#48577 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied
25-Mar-2026 06:01:34.720 security: info: client @0x708878016528 5.104.108.119#37034 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied
25-Mar-2026 06:01:34.740 security: info: client @0x70889407b758 5.104.108.119#39347 (ns2.letsbuild.ch): view Extern: query 'ns2.letsbuild.ch/AAAA/IN' denied
25-Mar-2026 06:01:34.742 security: info: client @0x70889ddf7448 5.104.108.119#44497 (ns3.letsbuild.ch): view Extern: query 'ns3.letsbuild.ch/AAAA/IN' denied
25-Mar-2026 06:01:34.742 security: info: client @0x708878016528 5.104.108.119#39345 (ns1.letsbuild.ch): view Extern: query 'ns1.letsbuild.ch/AAAA/IN' denied
...
show less
Web App Attack
🇨🇭
Inaxas AG
2024-01-08 11:47:18
UTC ·
(2 years ago)
Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060.
Unauthorized dial attempt: 59 times between: 08/01/2024 - 09:17 and 08/01/2024 - 09:17.
Ilegitimate register attempt: 58 times between: 08/01/2024 - 09:16 a ...
show more
Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060.
Unauthorized dial attempt: 59 times between: 08/01/2024 - 09:17 and 08/01/2024 - 09:17.
Ilegitimate register attempt: 58 times between: 08/01/2024 - 09:16 and 08/01/2024 - 09:16.
show less
Fraud VoIP
Port Scan
Brute-Force
🇺🇸
Teknikal_Domain
2024-01-08 11:35:48
UTC ·
(2 years ago)
[Jan 8 06:35:47] NOTICE[1256] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"10xxss222111ss0" <sip:[email protected] >' failed for '5.104.108.119:5429' (callid: 2833829140) - No matching endpoint found
[Jan 8 06:35:47] NOTICE[12 ...
show more
[Jan 8 06:35:47] NOTICE[1256] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"10xxss222111ss0" <sip:[email protected] >' failed for '5.104.108.119:5429' (callid: 2833829140) - No matching endpoint found
[Jan 8 06:35:47] NOTICE[1256] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"4908" <sip:[email protected] >' failed for '5.104.108.119:5429' (callid: 3225349706) - No matching endpoint found
[Jan 8 06:35:47] NOTICE[1256] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"10xxss222111ss0" <sip:[email protected] >' failed for '5.104.108.119:5429' (callid: 2833829140) - No matching endpoint found
[Jan 8 06:35:47] NOTICE[1256] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"10xxss222111ss0" <sip:[email protected] >' failed for '5.104.108.119:5429' (callid: 2833829140) - Failed to authenticate
[Jan 8 06:35:47] NOTICE[1256] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"4510" <sip:[email protected] >' failed for '5.1
...
show less
Fraud VoIP
Brute-Force
