IP Address: 91.92.243.63

Threat level: 10%

Attack count: 43

Country: Bulgaria

Region: Veliko Tarnovo

City: Sistov

ASN: 34368

ISP: Natskovi & Sie Ltd.

Net Block: 91.92.243.0-91.92.249.255

Domain name: thezone.bg

Stats (UTC)

Reported by

Timestamp

Notes

Flags

System

✅ Sakusen

4 days ago

RDP (TCP/3389): 68 connections | SSH (TCP/22): 23 login attempts, 7 distinct usernames, 20 distinct passwords

BruteForce, PortScan

RDP

✅ Sakusen

5 days ago

RDP (TCP/3389): 70 connections

PortScan

RDP

✅ Sakusen

7 days ago

Redis (TCP/6379): 34 commands | Automated web attack: 14 reqs, 6 paths probed, 5 returned 404; probed: 5 other, 1 .env

Hacking, BadBot, PortScan

REDIS

✅ Sakusen

8 days ago

Elasticsearch (TCP/9200): 50 commands | Redis (TCP/6379): 4 connections

PortScan

ELASTICSEARCH

✅ Sakusen

9 days ago

Elasticsearch (TCP/9200): 1 command

PortScan

ELASTICSEARCH