2026-05-10 23:23:37
(4 weeks ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Exploited Host
Bad Web Bot
🇬🇧
OptimusGO
2026-04-20 15:32:44
(1 month ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-04-20 16:32:44 UTC
Log evidence:
show less
Port Scan
Brute-Force
🇬🇧
OptimusGO
2026-04-18 00:09:39
(1 month ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-04-18 01:09:39 UTC
Log evidence:
show less
Port Scan
Brute-Force
🇬🇧
OptimusGO
2026-04-15 13:29:07
(1 month ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-04-15 14:29:07 UTC
Log evidence:
show less
Port Scan
Brute-Force
🇺🇸
MPL
2026-03-26 16:26:59
(2 months ago)
tcp/5555 (3 or more attempts)
Port Scan
🇬🇧
OptimusGO
2026-03-26 15:18:16
(2 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-03-26 15:18:06 UTC
Log evidence:
03/26/2026-15:18:05.362096 [wDrop] [**] [1:7001102:1] FINSERV CRITICAL: FTP Access Warning [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 111.43.228.11:10061 -> 185.127.18.66:21
03/26/2026-15:18:05.362096 [**] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 111.43.228.11:10061 -> 185.127.18.66:21
show less
Port Scan
Brute-Force
🇺🇸
RAP
2026-03-26 14:53:05
(2 months ago)
2026-03-26 14:53:05 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan
Web App Attack
🇮🇩
hermawan
2026-03-26 12:48:17
(2 months ago)
1774529290.036919 C6CSZI3YimqfIPWBI2 111.43.228.11 13891 103.166.156.58 5555 tcp - - - - S0 F F 0 S ...
show more
1774529290.036919 C6CSZI3YimqfIPWBI2 111.43.228.11 13891 103.166.156.58 5555 tcp - - - - S0 F F 0 S 1 44 0 0 - 6 (empty) (empty) 65535_2_536_0 (empty) 03/26/2026-19:48:10.036919
...
show less
Email Spam
Hacking
🇹🇷
rtbh.com.tr
2026-03-26 12:12:15
(2 months ago)
list.rtbh.com.tr report: tcp/8080
Brute-Force
🇺🇸
MPL
2026-03-26 07:46:27
(2 months ago)
tcp ports: 21,5555 (4 or more attempts)
Port Scan
🇫🇮
6kilowatti
2026-03-26 03:12:06
(2 months ago)
2026-03-26T05:12:06.226842+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ...
show more
2026-03-26T05:12:06.226842+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=111.43.228.11 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=4919 PROTO=TCP SPT=13981 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
2026-03-26 01:22:05
(2 months ago)
Try to connect to Port_Scan_21_stealth
Port Scan
🇺🇸
xmission.com
2026-03-26 01:17:34
(2 months ago)
Blocked by UFW (TCP on 8080)
Source port: 1071
TTL: 45
Packet length: 44
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 8080)
Source port: 1071
TTL: 45
Packet length: 44
TOS: 0x08
This report (for 111.43.228.11) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇺🇸
MPL
2026-03-25 23:50:19
(2 months ago)
tcp/5555
Port Scan
🇫🇷
security.rdmc.fr
2026-03-25 21:46:14
(2 months ago)
Port Scan Attack proto:TCP src:1360 dst:21
Port Scan