๐ซ๐ท
Altai
2026-10-21 11:19:26
(1 hour ago)
Blocked by UFW on Jellyfin [34567/tcp]
Source port: 40591
TTL: 236
Packet length: 44
TOS: 0x08
This ...
show more
Blocked by UFW on Jellyfin [34567/tcp]
Source port: 40591
TTL: 236
Packet length: 44
TOS: 0x08
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
decisionconcepts
2026-10-21 08:52:56
(4 hours ago)
113.173.156.151 - - [21/Oct/2026:01:52:51 -0700] "GET /cgi-bin/api.cgi?cmd=Login&token=null HTTP/1.1 ...
show more
113.173.156.151 - - [21/Oct/2026:01:52:51 -0700] "GET /cgi-bin/api.cgi?cmd=Login&token=null HTTP/1.1" 404 196 "-" "Python/3.14 aiohttp/3.14.4"
113.173.156.151 - - [21/Oct/2026:01:52:55 -0700] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 196 "-" "Python/3.14 aiohttp/3.14.4"
show less
Brute-Force
SSH
๐ซ๐ท
Lino Project
2026-10-20 18:53:17
(18 hours ago)
113.173.156.151 - - [20/Oct/2026:20:53:14 +0200] "GET /cgi-bin/magicBox.cgi?action=getSystemInfo HTT ...
show more
113.173.156.151 - - [20/Oct/2026:20:53:14 +0200] "GET /cgi-bin/magicBox.cgi?action=getSystemInfo HTTP/1.1" 404 403 "-" "Python/3.14 aiohttp/3.14.4"
113.173.156.151 - - [20/Oct/2026:20:53:15 +0200] "GET /cgi-bin/CGIProxy.fcgi?cmd=getDevInfo&usr=x&pwd=x HTTP/1.1" 404 403 "-" "Python/3.14 aiohttp/3.14.4"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Victor Lรณpez
2026-10-20 17:12:27
(19 hours ago)
82.197.66.178 113.173.156.151 - - [20/Oct/2026:12:12:23 -0500] "POST /onvif/device_service HTTP/1.1" ...
show more
82.197.66.178 113.173.156.151 - - [20/Oct/2026:12:12:23 -0500] "POST /onvif/device_service HTTP/1.1" 444 0 "-" "Python/3.14 aiohttp/3.14.4" -
82.197.66.178 113.173.156.151 - - [20/Oct/2026:12:12:24 -0500] "POST /onvif/device_service HTTP/1.1" 444 0 "-" "Python/3.14 aiohttp/3.14.4" -
82.197.66.178 113.173.156.151 - - [20/Oct/2026:12:12:26 -0500] "GET /ISAPI/System/deviceInfo HTTP/1.1" 444 0 "-" "Python/3.14 aiohttp/3.14.4" -
...
show less
Hacking
Web App Attack
๐ซ๐ท
Kejult
2026-10-20 08:37:58
(1 day ago)
Honeypot Finding: verified TCP multi-port scan/probing; 13 application-level events across 2 target ...
show more
Honeypot Finding: verified TCP multi-port scan/probing; 13 application-level events across 2 target ports and 13 source port(s). Ports: 34567/service, 8899/service. Sensors: Honeytrap.
show less
Port Scan
๐ณ๐ฑ
Savvii
2026-10-19 15:44:28
(1 day ago)
15 attempts against mh-modsecurity-ban on solar
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-10-18 22:54:41
(2 days ago)
113.173.156.151 - - [18/Oct/2026:22:54:37 +0000] "POST /RPC2_Login HTTP/1.1" 400 291 "-" "Python/3.1 ...
show more
113.173.156.151 - - [18/Oct/2026:22:54:37 +0000] "POST /RPC2_Login HTTP/1.1" 400 291 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [18/Oct/2026:22:54:37 +0000] "POST /RPC2_Login HTTP/1.1" 400 291 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [18/Oct/2026:22:54:38 +0000] "POST /RPC2 HTTP/1.1" 400 291 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [18/Oct/2026:22:54:39 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 400 291 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [18/Oct/2026:22:54:39 +0000] "GET /onvif/device_service HTTP/1.1" 400 291 "-" "Mozilla/5.0" "-" edge="113.173.156.151"
...
show less
Web Spam
Web App Attack
๐บ๐ธ
Cyber Crusader
2026-10-18 16:30:02
(2 days ago)
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
Anonymous
2026-10-17 05:32:02
(4 days ago)
suricata IPS/IDS detection, ruleset ET EXPLOIT Dahua Netkeyboard Authentication Bypass Attempt M2 (h ...
show more
suricata IPS/IDS detection, ruleset ET EXPLOIT Dahua Netkeyboard Authentication Bypass Attempt M2 (http) (CVE-2021-33044)
show less
Port Scan
๐ซ๐ฎ
JRID
2026-10-16 20:29:59
(4 days ago)
Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-10-16 12:58:21
(5 days ago)
113.173.156.151 - - [16/Oct/2026:12:58:15 +0000] "POST /cgi-bin/api.cgi?cmd=Login&token=null HTTP/1. ...
show more
113.173.156.151 - - [16/Oct/2026:12:58:15 +0000] "POST /cgi-bin/api.cgi?cmd=Login&token=null HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [16/Oct/2026:12:58:17 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [16/Oct/2026:12:58:19 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [16/Oct/2026:12:58:19 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [16/Oct/2026:12:58:19 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
...
show less
Bad Web Bot
๐ซ๐ท
Kejult
2026-10-16 12:49:53
(5 days ago)
Honeypot Finding: verified TCP multi-port scan/probing; 53 application-level events across 4 target ...
show more
Honeypot Finding: verified TCP multi-port scan/probing; 53 application-level events across 4 target ports and 15 source port(s). Ports: 80/HTTP, 34567/service, 8899/service, 37777/service. Sensors: Tanner, Honeytrap.
show less
Port Scan
๐ฎ๐ช
wiredalter
2026-10-16 07:44:32
(5 days ago)
Blocked by UFW on vhVPS [37777/tcp]
Source Port: 51775
TTL: 108
Packet Length: 52
TOS: 0x08
Analyze ...
show more
Blocked by UFW on vhVPS [37777/tcp]
Source Port: 51775
TTL: 108
Packet Length: 52
TOS: 0x08
Analyzed by https://ip.wiredalter.com
show less
Port Scan
Brute-Force
๐ช๐ธ
robotstxt
2026-10-16 00:09:07
(5 days ago)
113.173.156.151 - - [16/Oct/2026:00:09:00 +0000] "POST /cgi-bin/api.cgi?cmd=Login&token=null HTTP/1. ...
show more
113.173.156.151 - - [16/Oct/2026:00:09:00 +0000] "POST /cgi-bin/api.cgi?cmd=Login&token=null HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [16/Oct/2026:00:09:02 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [16/Oct/2026:00:09:03 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [16/Oct/2026:00:09:04 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
113.173.156.151 - - [16/Oct/2026:00:09:04 +0000] "GET /cgi-bin/configManager.cgi?action=getConfig&name=General HTTP/1.1" 404 189 "-" "Python/3.14 aiohttp/3.14.4" "-" edge="113.173.156.151"
...
show less
Bad Web Bot
๐ฏ๐ต
knock
2026-10-15 19:54:16
(5 days ago)
Knock-Knock honeypot brute-force: HTTP (41 total hits)
Web App Attack