cyberzone.hu
2026-W42 · 2026-10-12 – 2026-10-18
1 558
unsolicited attempts this week (UTC)
- distinct IP addresses
- 65
- countries
- 27
- networks (AS)
- 30
- ports knocked on for the first time
- 0
THIS WEEK'S HIGHLIGHTS
Most attempts from one IP within 10 minutes: 130.12.x.x (United States, Railnet LLC), 340 attempts in 10 minutes, mostly web (HTTP/S).
IP address seen in the most distinct hours: 130.12.x.x, in 4 hours, 527 attempts in total, mostly web (HTTP/S).
Campaign running on the most machines: 640dd635, 6 machines, 29 steps (listed below with the others).
SERVICES
- web (HTTP/S)
- 1 522
- SSH (real, 6969)
- 36
CAMPAIGNS THIS WEEK
several machines, the same 3+ steps: one program, many places
640dd635 · 6 machines · 29 steps
crowdsec-sim waf GET /.DS_Store GET /.env GET /.git/config GET /.vscode/sftp.json GET /.well-known/security.txt GET /@vite/env GET /___proxy_subdomain_c
017796c9 · 5 machines · 9 steps
GET /.env GET /.github/copilot-instructions.md GET /AGENTS.md GET /CLAUDE.md GET /README.md GET /api/config GET /config.js GET /config.json GET /js/env.
a2b28b77 · 2 machines · 30 steps
crowdsec-sim waf port 8443 GET /.DS_Store GET /.env GET /.git/config GET /.vscode/sftp.json GET /.well-known/security.txt GET /@vite/env GET /___proxy_
7d8c3681 · 2 machines · 4 steps
GET /.well-known/security.txt GET /app-ads.txt GET /security.txt GET /sellers.json
28a407e6 · 1 machines · 5 steps
GET //blog/ GET //blog/robots.txt GET //wordpress/ GET //wp/ GET //xmlrpc.php
ARCHIVE
updated hourly · the full dataset without IP addresses: /data/