pktdrop.cc / test2

██████╗ ██╗  ██╗████████╗██████╗ ██████╗  ██████╗ ██████╗
██╔══██╗██║ ██╔╝╚══██╔══╝██╔══██╗██╔══██╗██╔═══██╗██╔══██╗
██████╔╝█████╔╝    ██║   ██║  ██║██████╔╝██║   ██║██████╔╝
██╔═══╝ ██╔═██╗    ██║   ██║  ██║██╔══██╗██║   ██║██╔═══╝
██║     ██║  ██╗   ██║   ██████╔╝██║  ██║╚██████╔╝██║
╚═╝     ╚═╝  ╚═╝   ╚═╝   ╚═════╝ ╚═╝  ╚═╝ ╚═════╝ ╚═╝

Updated: 2026-03-24 16:46:01 EET

Last hostile event: 2026-03-24 16:27:49 EET

Total hostile events (all time)

869169

Hostile events today (so far): 1990 (~118.68 / hour)

Record hostile day: 85217 (2026-02-10)

Average hostile/day since: 5447 (since 2026-01-23, 61 active days)

Trend (last 14d, today→left): ▂▃▄▃▄▄▃▅█▃▇▄▅▅

Unique attacker IPs (current log window): 133

Top attacker IPs (current log window)

147 60.244.155.70
147 103.30.41.231
143 82.223.11.222
135 154.221.17.42
109 87.248.237.138
107 120.48.1.74
104 58.69.56.44
93 40.121.200.75
93 157.66.34.121
93 103.20.122.54

Top attempted usernames (current log window)

155 root
64 345gs5662d34
8 ubuntu
8 guest
7 home
7 deploy
5 tester
5 remote
5 pzuser
5 paid
5 mgeweb
5 guillaume
5 facturacion
5 ay
5 amin
5 admin
4 wilson
4 tommy
4 proxyuser
4 nfe
4 mssql
4 kevin
4 dolphinscheduler
4 dockeruser
4 crm

Top attempted passwords (current log window)

64 345gs5662d34
63 3245gs5662d34
49 1234
38 12345678
38 123456
32 password
30 12345
21 admin
20 123
6 guest1234
5 testerpass
5 sr1234
5 Remote123!
5 Mgeweb123!
5 home1234
5 demon
5 Ay123
5 aminpass
4 tommypass
4 password123
4 nfe1234
4 Mssql123!
4 asdqwe
4 Aa123123
3 Password12345

Top attacker commands (current log window)

65cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7Vv…
65cd ~; chattr -ia .ssh; lockr -ia .ssh
2whoami
2which ls
2w
2uname -s -m
2uname -m
2uname -a
2uname
2top
2rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.…
2ls -lh $(which ls)
2lscpu | grep Model
2free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
2df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
2crontab -l
2cat /proc/cpuinfo | grep name | wc -l
2cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
2cat /proc/cpuinfo | grep model | grep name | wc -l
1echo "root:gnOghvAWrLsg"|chpasswd|bash
1echo "root:GfVziol7n2vy"|chpasswd|bash
1chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mk…

Scroll for more.

Geo / ASN (weighted by hits, current log window)

Top Countries

hits	country
816	China
531	United States
522	Hong Kong
393	Indonesia
363	Russia
222	Singapore
211	Spain
184	India
175	Germany
154	Philippines
147	Taiwan
133	Mexico
118	Japan
114	Vietnam
94	The Netherlands
93	Thailand
91	South Korea
86	Norway
86	Dominican Republic
68	Sweden
50	Chile
35	Argentina
30	Türkiye
30	Colombia
25	United Kingdom
23	Seychelles
23	Malaysia
14	Romania
5	Italy

Top Cities

hits	city
540	China
375	Hong Kong, Hong Kong
307	Indonesia
165	Beijing, China
161	Washington, United States
154	Singapore
147	Taichung, Taiwan
147	Hong Kong
143	Spain
114	United States
109	St Petersburg, Russia
104	Cebu City, Philippines
93	Thailand
91	Mexico City, Mexico
89	Germany
86	Vietnam
86	Nordland, Norway
86	Moscow, Russia
86	Jakarta, Indonesia
86	Frankfurt am Main, Germany
86	Dominican Republic
86	Bengaluru, India
77	Russia
75	Sengenchō, Japan
72	Amsterdam, The Netherlands
70	Shanghai, China
68	Vaxjo, Sweden
68	Ufa, Russia
68	Singapore, Singapore
68	Orihuela, Spain

Top ASN

hits	ASN
326	Tencent Building, Kejizhongyi Avenue
256	China Telecom Group
222	DigitalOcean, LLC
214	PT Cloud Hosting Indonesia
199	UCLOUD INFORMATION TECHNOLOGY HK LIMITED
193	IONOS SE
181	Beijing Baidu Netcom Science and Technology Co., Ltd.
161	Microsoft Corporation
147	Cloudie Limited
147	Asia Pacific On-line Service Inc.
135	YISU CLOUD LTD
109	SkyNet Ltd.
104	Philippine Long Distance Telephone Company
93	PT. Beon Intermedia
93	CyberWorld
91	Kaopu Cloud HK Limited
89	Inside Network LTD
89	CHINANET SHAANXI province Cloud Base network
86	VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
86	TECNOLOGIA DIGITAL, S.A. DGTEC
86	Kontel LLC
86	Global Connectivity Solutions Llp
77	Proton66 OOO
75	KDDI CORPORATION
70	ASunknown Techoff Srv Limited
68	SK Broadband Co Ltd
68	Patrik Lagerman
68	JSC Ufanet
68	HostPapa
68	Cloud Host Pte Ltd

City is approximate (often datacenter/ISP location).

Daily hostile events (today first)

Today (so far): 1990 Yesterday: 3314

date	bar	count
2026-03-24	#	1990
2026-03-23	#	3314
2026-03-22	#	4534
2026-03-21	#	3622
2026-03-20	#	4014
2026-03-19	#	4099
2026-03-18	#	3049
2026-03-17	##	6521
2026-03-16	###	11016
2026-03-15	#	3132
2026-03-14	###	9967
2026-03-13	#	4761
2026-03-12	##	6603
2026-03-11	##	5663
2026-03-10	#	5034
2026-03-09	##	5469
2026-03-08	##	6562
2026-03-07	###	12365
2026-03-06	#######################	82639
2026-03-05		1764
2026-03-04		723
2026-03-03		764
2026-03-02		1324
2026-03-01		1280
2026-02-28	#	2119
2026-02-27		692
2026-02-26		1151
2026-02-25		750
2026-02-24		799
2026-02-23		795
2026-02-22		1141
2026-02-21		1079
2026-02-20	#	3343
2026-02-19		850
2026-02-18		939
2026-02-17		762
2026-02-16	##	5923
2026-02-15		1086
2026-02-14		988
2026-02-13		1670
2026-02-12	###	11678
2026-02-11	#	2485
2026-02-10	########################	85217
2026-02-09		1304
2026-02-08		1384
2026-02-07	#	2258
2026-02-06		1250
2026-02-05		1202
2026-02-04		1261
2026-02-03		1334
2026-02-02		1095
2026-02-01		1711
2026-01-31		1228
2026-01-30		1530
2026-01-29		1224
2026-01-28		430
2026-01-27		475
2026-01-26		457
2026-01-25		191
2026-01-24		149

Hostile daily counts include eventid: login.failed, login.success, command.input, direct-tcpip.request, session.connect, session.file_download, session.file_upload.

Zero days hidden. (Window: last 60 days)

System / diagnostics

Events (current log window): 4836

Current log window: since 2026-03-24 02:00:03 EET (last event 2026-03-24 16:27:49 EET)

System uptime: up 8 weeks, 4 days, 7 hours, 11 minutes