cyberzone.hu open data, regenerated hourly (last: 2026-11-08 07:47 UTC)

What this is: every unsolicited connection to an empty server (VPS 217.13.111.95,
Budapest) and the parked domains on it, since 2026-10-18. Nothing here is real:
no PHP, no databases, no mail relay; every service only logs and refuses.
The owner's own traffic is excluded. No IP addresses are published.

daily.csv
  date_utc, service, country (GeoLite2 ISO code), asn, network (AS name),
  attempts, unique_ips (distinct IPs within that row; do not add up across rows)
  service: caddy = web requests to the parked pages (all of them, including
  ordinary visitors and search bots); cz-* = the fake services; ssh = the real sshd.

campaigns.csv
  Groups of 3 or more IPs that performed exactly the same set of actions
  (web paths requested, SSH client string, usernames tried, commands sent).
  Everyday browser requests (/, favicon, robots.txt) are ignored.

License: CC BY 4.0, cyberzone.hu. Country and network data: GeoLite2 by MaxMind.