๐ง๐ช
34.38.106.200
08 Feb 2026
Repeat Attempts to connect to our FTP Server - Issue Unknown/Bad Commands
(000997)2/7/2026 19:51: ...
show more
Repeat Attempts to connect to our FTP Server - Issue Unknown/Bad Commands
(000997)2/7/2026 19:51:52 - (not logged in) (34.38.106.200)> Connected, sending welcome message...
(000997)2/7/2026 19:51:53 - (not logged in) (34.38.106.200))> MGLNDD_75.145.198.42_21
(000997)2/7/2026 19:51:54 - (not logged in) (34.38.106.200)> disconnected.
show less
Port Scan
Exploited Host
๐ฎ๐ช
52.178.176.146
30 Jan 2026
Repeated Attempts to request files on our web server (Port 80) which do not exist
Get :/Settings.Ph ...
show more
Repeated Attempts to request files on our web server (Port 80) which do not exist
Get :/Settings.Php
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
34.66.88.210
29 Jul 2025
Repeat attempts to use non-Ftp Commands on our FTP server.
-
>
> 7/28/2025 17:32:03 - (not logge ...
show more
Repeat attempts to use non-Ftp Commands on our FTP server.
-
>
> 7/28/2025 17:32:03 - (not logged in) (34.66.88.210)> Connected, sending welcome message...
> 7/28/2025 17:32:04 - (not logged in) (34.66.88.210)> SSL connection established
> 7/28/2025 17:32:04 - (not logged in) (34.66.88.210)> GET / HTTP/1.1
> 7/28/2025 17:32:04 - (not logged in) (34.66.88.210)> 500 Syntax error, command unrecognized.
> 7/28/2025 17:32:04 - (not logged in) (34.66.88.210)> Host: 75.145.198.42:990
> 7/28/2025 17:32:04 - (not logged in) (34.66.88.210)> 500 Syntax error, command unrecognized.
> 7/28/2025 17:32:04 - (not logged in) (34.66.88.210)> User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
> 7/28/2025 17:32:04 - (not logged in) (34.66.88.210)> 500 Syntax error, command unrecognized.
show less
FTP Brute-Force
Hacking
Bad Web Bot
๐บ๐ธ
73.50.192.81
18 Apr 2025
Repeat attempts to use/access sir name "Admin" at our domain
~
4/18 02:49:00p 0452 SMTP Connec ...
show more
Repeat attempts to use/access sir name "Admin" at our domain
~
4/18 02:49:00p 0452 SMTP Connection accepted on port 587 from: 73.50.192.81 port 60911
4/18 02:49:00p 0452 SMTP Hostname: c-73-50-192-81.hsd1.in.comcast.net
4/18 02:49:02p 0452 !SMTP UNKNOWN USER: [email protected]
4/18 02:49:07p 0452 SMTP Session thread terminated.
show less
Email Spam
Hacking
๐บ๐ธ
206.168.34.66
24 Feb 2025
Repeat attempts to connect to our FTP server (SSL/Port 990)
~
2/24/2025 00:29:25 (206.168.34.66)> ...
show more
Repeat attempts to connect to our FTP server (SSL/Port 990)
~
2/24/2025 00:29:25 (206.168.34.66)> Connected, sending welcome message...
2/24/2025 00:29:41 (206.168.34.66)> disconnected.
2/24/2025 00:30:11 (206.168.34.66)> Connected, sending welcome message...
2/24/2025 00:30:14 (206.168.34.66)> disconnected.
2/24/2025 00:30:14 (206.168.34.66)> Connected, sending welcome message...
2/24/2025 00:30:14 (206.168.34.66)> SSL connection established
2/24/2025 00:30:17 (206.168.34.66)> disconnected.
2/24/2025 00:30:20 (206.168.34.66)> Connected, sending welcome message...
2/24/2025 00:30:21 (206.168.34.66)> SSL connection established
2/24/2025 00:30:21 (206.168.34.66)> disconnected.
2/24/2025 00:30:22 (206.168.34.66)> Connected, sending welcome message...
2/24/2025 00:30:22 (206.168.34.66)> SSL connection established
2/24/2025 00:30:22 (206.168.34.66)> disconnected.
show less
FTP Brute-Force
Port Scan
Exploited Host
๐บ๐ธ
159.223.201.124
23 Feb 2025
Repeat illicit connections to our FTP server as a Web client!
~
2/22/2025 03:45:06 (159.223.201.12 ...
show more
Repeat illicit connections to our FTP server as a Web client!
~
2/22/2025 03:45:06 (159.223.201.124)> Connected, sending welcome message...
2/22/2025 03:45:06 (159.223.201.124)> GET /aab9 HTTP/1.1
2/22/2025 03:45:06 (159.223.201.124)> 500 Syntax error, command unrecognized.
2/22/2025 03:45:06 (159.223.201.124)> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77
2/22/2025 03:45:06 (159.223.201.124)> 500 Syntax error, command unrecognized.
2/22/2025 03:45:06 (159.223.201.124)> Accept: */*
2/22/2025 03:45:06 (159.223.201.124)> 500 Syntax error, command unrecognized.
2/22/2025 03:45:06 (159.223.201.124)> Host: 75.145.198.42:21
2/22/2025 03:45:06 (159.223.201.124)> 500 Syntax error, command unrecognized.
2/22/2025 03:45:06 (159.223.201.124)> Connection: Keep-Alive
2/22/2025 03:45:06 (159.223.201.124)> 500 Syntax error, command unrecognized.
2/22/2025 03:45:07 (159.223.201.124)> disconnected.
show less
FTP Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
45.61.139.121
05 Feb 2025
Repeat illicit web commands on our FTP Server
(023931)2/5/2025 04:57:36 - (not logged in) (45.61 ...
show more
Repeat illicit web commands on our FTP Server
(023931)2/5/2025 04:57:36 - (not logged in) (45.61.139.121)> Connected, sending welcome message...
(023931)2/5/2025 04:57:36 - (not logged in) (45.61.139.121)> GET /?search=%25x%25url%25:%host%}{.exec|cglc.}{.break.} HTTP/1.1
(023931)2/5/2025 04:57:36 - (not logged in) (45.61.139.121)> 500 Syntax error, command unrecognized.
(023931)2/5/2025 04:57:36 - (not logged in) (45.61.139.121)> disconnected.
show less
FTP Brute-Force
Bad Web Bot
๐ฐ๐ท
112.218.64.2
29 Jan 2025
Repeat attempts on port 25 to access our Mailserver [No DNS/Blocked]
to many tries to list.
Email Spam
Hacking
๐ฌ๐ง
35.177.96.71
09 Dec 2024
Repeat attempts to access our Mailserver (Port 587) [Blocked]
12/9 12:42:53p 0564 SMTP Connecti ...
show more
Repeat attempts to access our Mailserver (Port 587) [Blocked]
12/9 12:42:53p 0564 SMTP Connection accepted on port 587 from: 35.177.96.71 port 52144
12/9 12:42:53p 0564 SMTP Hostname: ec2-35-177-96-71.eu-west-2.compute.amazonaws.com
12/9 12:42:53p 0564 !SMTP CLIENT HOSTNAME BLOCKED: ec2-35-177-96-71.eu-west-2.compute.amazonaws.com (2 total)
12/9 12:44:52p 0548 SMTP Connection accepted on port 587 from: 35.177.96.71 port 41024
12/9 12:44:53p 0548 SMTP Hostname: ec2-35-177-96-71.eu-west-2.compute.amazonaws.com
12/9 12:44:53p 0548 !SMTP CLIENT HOSTNAME BLOCKED: ec2-35-177-96-71.eu-west-2.compute.amazonaws.com (3 total)
12/9 12:46:56p 0564 SMTP Connection accepted on port 587 from: 35.177.96.71 port 49152
12/9 12:46:56p 0564 SMTP Hostname: ec2-35-177-96-71.eu-west-2.compute.amazonaws.com
show less
Port Scan
Hacking
Brute-Force
๐บ๐ธ
65.49.20.69
05 Dec 2024
Numerous attempts to hit our regular & secure Web servers to request files/paths
which do not exist ...
show more
Numerous attempts to hit our regular & secure Web servers to request files/paths
which do not exist as well as execute illicit commands (Too many attempts to list)
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
103.198.26.132
10 Oct 2024
Repeat attempts to send mail [Blocked by DNSBL :"dnsbl-2.uceprotect.net" (127.0.0.2)
~
10/10 11 ...
show more
Repeat attempts to send mail [Blocked by DNSBL :"dnsbl-2.uceprotect.net" (127.0.0.2)
~
10/10 11:18:51a 0320 SMTP Connection accepted on port 25 from: 103.198.26.132 port 57614
10/10 11:18:52a 0320 SMTP Hostname: kaloumedourebile.store
10/10 11:18:53a 0320 SMTP DNSBL Query: 132.26.198.103.dnsbl-2.uceprotect.net resolved to: 127.0.0.2
10/10 11:18:53a 0320 SMTP BLACKLISTED SERVER on dnsbl-2.uceprotect.net: kaloumedourebile.store [103.198.26.132] = 127.0.0.2
show less
Email Spam
Exploited Host
๐ซ๐ฎ
193.160.100.76
08 Oct 2024
Repeated probing (All Services - Too many to list) [Blocked]
FTP Brute-Force
Port Scan
Hacking
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
45.76.232.43
25 Sep 2024
Repeat attempts to connect & do nothing, Too Many to List (All Services, Blocked)
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
179.61.228.8
12 Sep 2024
Repeated probing (All Services) [Blocked] Too Many attempts to list.
DDoS Attack
FTP Brute-Force
Port Scan
Brute-Force
Web App Attack
๐ณ๐ฟ
116.90.74.108
07 Sep 2024
Repeat attempts to probe (All Services) [To Many to list] Blocked
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
๐ณ๐ด
62.63.21.195
12 Aug 2024
Repeat attempts to access Port 80 (And do nothing)
-
8/12 08:08:05a 0536 HTTP connection accep ...
show more
Repeat attempts to access Port 80 (And do nothing)
-
8/12 08:08:05a 0536 HTTP connection accepted from: 62.63.21.195 port 55809
8/12 08:08:05a 0536 Session thread started
8/12 08:08:05a 0536 Hostname: post1.salangen.kommune.no
8/12 08:08:05a 0536 !ERROR 54 receiving on socket
8/12 08:08:06a 0536 Session thread terminated
8/12 08:08:50a 0712 HTTP connection accepted from: 62.63.21.195 port 58509
8/12 08:08:50a 0712 Session thread started
8/12 08:08:50a 0712 Hostname: post1.salangen.kommune.no
8/12 08:08:50a 0712 !ERROR 54 receiving on socket
8/12 08:08:51a 0712 Session thread terminated
8/12 08:09:47a 0516 HTTP connection accepted from: 62.63.21.195 port 2849
8/12 08:09:47a 0516 Session thread started
8/12 08:09:47a 0516 Hostname: post1.salangen.kommune.no
8/12 08:09:47a 0516 !ERROR 54 receiving on socket
8/12 08:09:48a 0516 Session thread terminated
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
119.18.0.113
07 Aug 2024
Repeat attempts from this Ip, All open ports/servers (To Many to list)
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
45.76.141.105
12 Jul 2024
Hit every service on my site with SYN Packets, Ftp/Smtp/Telnet/time/Web/Pop3/Ident (Oddly enough no ...
show more
Hit every service on my site with SYN Packets, Ftp/Smtp/Telnet/time/Web/Pop3/Ident (Oddly enough no hits for my https/Encrypted services)
show less
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
Brute-Force
Web App Attack
๐ซ๐ท
92.205.18.156
10 May 2024
Repeat Attempt to connect then OB disconnect (SYN Packet Abuse)
All Services hit, Too Many to list.
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
67.184.162.20
08 May 2024
Repeat Attempt to connect (Then Disconnect) too many attempts to list (SYN Packet probe)
All servic ...
show more
Repeat Attempt to connect (Then Disconnect) too many attempts to list (SYN Packet probe)
All services hit
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
104.36.85.120
05 May 2024
Repeat attempts on all low port number servers, Hacking, Probing, file requests (Do not exist) inval ...
show more
Repeat attempts on all low port number servers, Hacking, Probing, file requests (Do not exist) invalid commands ect.
(Too Many to list)
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
52.167.144.184
03 Feb 2024
Repeat attempts at getting/posting files which do not exist
-
52.167.144.184 - - [02/Feb/2024:12:3 ...
show more
Repeat attempts at getting/posting files which do not exist
-
52.167.144.184 - - [02/Feb/2024:12:30:38 -0500] "GET /.env HTTP/2.0" 403 181 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
52.167.144.184 - - [02/Feb/2024:12:30:58 -0500] "POST /.env HTTP/2.0" 403 181 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
52.167.144.184 - - [02/Feb/2024:12:31:27 -0500] "GET /.env HTTP/2.0" 403 181 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
52.167.144.13 - - [02/Feb/2024:12:32:18 -0500] "POST/.env HTTP/2.0" 403 181 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
show less
DDoS Attack
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
134.96.225.205
29 Dec 2023
Repeat attempts to send mail to one (or more) of our users (Blocked by Backscatterer DNSBL [127.0.0. ...
show more
Repeat attempts to send mail to one (or more) of our users (Blocked by Backscatterer DNSBL [127.0.0.2])
-
12/28 08:23:36p 0696 SMTP Connection accepted on port 25 from: 134.96.225.205 port 38658
12/28 08:23:38p 0696 SMTP DNSBL Query: 205.225.96.134.ips.backscatterer.org resolved to: 127.0.0.2
12/28 08:23:38p 0696 SMTP BLACKLISTED SERVER on ips.backscatterer.org: notify.cispa.uni-saarland.de [134.96.225.205] = 127.0.0.2
12/28 08:23:38p 0696 TX: 550 Mail from 134.96.225.205 refused due to listing at ips.backscatterer.org
12/28 08:23:38p 0696 !SMTP REFUSED SESSION from blacklisted server
[End]
show less
Email Spam
Port Scan
Hacking
๐ฐ๐ฟ
82.200.130.17
13 Dec 2023
Repeat attempts to get files which do not exist, Too many attempts to list (Blocked)
Bad Web Bot
Web App Attack
๐ง๐ท
201.77.235.143
11 Dec 2023
Repeat attempts to do nothing (Connect/Hang up) [Blocked] TCP Port 80 DISC (10054)
Port Scan
Brute-Force
Bad Web Bot
Web App Attack