๐ซ๐ท
sthoyer.de
2026-10-18 07:48:00
(21 minutes ago)
Oct 18 09:47:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ...
show more
Oct 18 09:47:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.227.39.216 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=48145 DF PROTO=TCP SPT=36256 DPT=6001 WINDOW=64240 RES=0x00 SYN URGP=0
Oct 18 09:47:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.227.39.216 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=48146 DF PROTO=TCP SPT=36256 DPT=6001 WINDOW=64240 RES=0x00 SYN URGP=0
Oct 18 09:47:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.227.39.216 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=48147 DF PROTO=TCP SPT=36256 DPT=6001 WINDOW=64240 RES=0x00 SYN URGP=0
Oct 18 09:47:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=64.227.39.216 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=48148 DF PROTO=TCP SPT=36256 DPT=6001 WINDOW
...
show less
Port Scan
๐ซ๐ท
Little Iguana
2026-10-18 07:47:56
(21 minutes ago)
trying to access non-authorized port
Port Scan
๐ซ๐ท
EvoX
2026-10-18 07:40:46
(28 minutes ago)
๐ก๏ธ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 6001
GET /
User-Agent: CGrab/v8.24.1-dev-throug ...
show more
๐ก๏ธ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 6001
GET /
User-Agent: CGrab/v8.24.1-dev-throughput
Accept: */*; 6001 [1] TCP
show less
Hacking
Bad Web Bot
๐ฉ๐ช
Ilop
2026-10-18 07:30:09
(39 minutes ago)
[hp-100] 5 unsolicited packets to honeypot ports 6001 (OCI DShield sensor)
Port Scan
๐ซ๐ท
Yepngo
2026-10-18 07:18:07
(51 minutes ago)
2026-10-18T09:18:03.059738+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ...
show more
2026-10-18T09:18:03.059738+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=64.227.39.216 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=2679 DF PROTO=TCP SPT=58786 DPT=6001 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-18T09:18:04.064940+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=64.227.39.216 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=2680 DF PROTO=TCP SPT=58786 DPT=6001 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-18T09:18:05.098134+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=64.227.39.216 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=2681 DF PROTO=TCP SPT=58786 DPT=6001 WINDOW=64240 RES=0x00 SYN URGP=0
2026-10-18T09:18:06.123270+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=64.227.39.216 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=2682 DF PROTO=TCP S
...
show less
Port Scan
๐จ๐ฟ
lp
2026-10-18 07:11:42
(57 minutes ago)
anomaly: tcp_port_scan, 4952 > threshold 500, repeats 53360 times
Port Scan
๐ฆ๐บ
FireGuard Server
2026-10-18 07:10:05
(59 minutes ago)
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=6001
Port Scan
Hacking
Anonymous
2026-10-18 06:25:01
(1 hour ago)
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=6001
Port Scan
Hacking
๐จ๐ฟ
Prcek
2026-10-18 05:48:16
(2 hours ago)
PortScan:HOST=64.227.39.216,DPORTS=6001
Port Scan
๐ฌ๐ง
essinghigh
2026-10-18 05:47:52
(2 hours ago)
IPS Detection: 64.227.39.216 -> DPT: 6001
Port Scan
Anonymous
2026-10-18 05:45:00
(2 hours ago)
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=6001
Port Scan
Hacking
Brute-Force
๐ซ๐ท
GabrielJST
2026-10-18 05:10:26
(2 hours ago)
*Port Scan* detected from 64.227.39.216 (GB/United Kingdom/-).
Port Scan
๐ซ๐ท
Kejult
2026-10-18 04:22:43
(3 hours ago)
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection ...
show more
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 292 payload byte(s) total, maximum payload 99 byte(s). Target port(s): 6001.
show less
Port Scan
Hacking
๐ฌ๐ง
KTSTechnology
2026-10-16 11:12:33
(1 day ago)
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
Port Scan
๐ฌ๐ง
sandra361
2026-10-16 10:43:32
(1 day ago)
Port scan detected: 16 attempts across 16 ports (28916, 28917, 28921, 28924, 28925, ..., 28957, 2895 ...
show more
Port scan detected: 16 attempts across 16 ports (28916, 28917, 28921, 28924, 28925, ..., 28957, 28958, 28961). | Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=64.227.39.216 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=20513 PROTO=TCP SPT=38218 DPT=28925 WINDOW=65535 RES=0x00 SYN URGP=0
show less
Port Scan