๐ฏ๐ต
Kinsei Engineering Inc.
2026-07-09 13:19:12
(2 days ago)
UFW:High-frequency access to non-released ports used by software with known vulnerabilities.
Port Scan
๐ฏ๐ต
S.O.B.A. Dev.
2026-07-09 13:18:39
(2 days ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐จ๐ญ
Elysium Security
2026-07-09 05:07:55
(3 days ago)
Mass port scanning on a whole network
Port Scan
Anonymous
2026-07-08 20:37:03
(3 days ago)
fail2ban:piguard:14,18
Port Scan
Brute-Force
๐ฌ๐ง
sonot
2026-07-08 19:56:24
(3 days ago)
Blocked by UFW on tunneluk01 [8080/tcp] | SPT: 13884 | TTL: 229 | LEN: 44 | TOS: 0x00 โข Reported by: ...
show more
Blocked by UFW on tunneluk01 [8080/tcp] | SPT: 13884 | TTL: 229 | LEN: 44 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ซ๐ท
Duggy_Tuxy๐งฑ
2026-07-08 19:37:18
(3 days ago)
[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))
Port Scan
๐บ๐ธ
LotPhantom
2026-07-08 19:35:36
(3 days ago)
2026-07-08T19:35:31.802595+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ...
show more
2026-07-08T19:35:31.802595+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=113.211.214.237 DST=157.230.217.55 LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=61188 DF PROTO=TCP SPT=13883 DPT=1080 WINDOW=512 RES=0x00 SYN URGP=0
2026-07-08T19:35:35.566036+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=113.211.214.237 DST=157.230.217.55 LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=61188 DF PROTO=TCP SPT=13884 DPT=3128 WINDOW=512 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking
Anonymous
2026-07-08 19:33:07
(3 days ago)
Jul 8 15:33:04 localhost kernel: [111884428.431295] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ...
show more
Jul 8 15:33:04 localhost kernel: [111884428.431295] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=113.211.214.237 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=228 ID=10576 DF PROTO=TCP SPT=13883 DPT=1080 WINDOW=512 RES=0x00 SYN URGP=0
Jul 8 15:33:04 localhost kernel: [111884428.431314] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=113.211.214.237 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=228 ID=10576 DF PROTO=TCP SPT=13883 DPT=1080 SEQ=12645 ACK=0 WINDOW=512 RES=0x00 SYN URGP=0 OPT (02040218)
Jul 8 15:33:07 localhost kernel: [111884431.684252] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=113.211.214.237 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=232 ID=10576 DF PROTO=TCP SPT=13884 DPT=3128 WINDOW=512 RES=0x00 SYN URGP=0
Jul 8 15:33:07 localhost kernel: [111884431.684280] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=113.211.214.237 DST=
show less
Port Scan
๐บ๐ธ
stechusa
2026-07-02 02:09:18
(1 week ago)
ELEVATED_THREAT | 357 IPs targeting /brand.html | URL template shared by 118 IPs: /brand.html?bulb_s ...
show more
ELEVATED_THREAT | 357 IPs targeting /brand.html | URL template shared by 118 IPs: /brand.html?bulb_shape=*&bulb_shape_type=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.89, unique_ips=581)
show less
Bad Web Bot
DDoS Attack
๐ฉ๐ช
botreporter
2026-06-28 12:31:47
(1 week ago)
botnet ignoring robots.txt
Bad Web Bot
๐ฉ๐ช
pltcldvlpr
2026-06-04 05:31:34
(1 month ago)
Bogus Useragent: 113.211.214.237 - - [04/Jun/2026:07:31:34 +0200] "GET /protocol?id=st_5_82&offset=2 ...
show more
Bogus Useragent: 113.211.214.237 - - [04/Jun/2026:07:31:34 +0200] "GET /protocol?id=st_5_82&offset=2200&seq=2220 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10.0; Trident/3.0)" asn=9534 org="Maxis Broadband Sdn Bhd" country=MY
...
show less
Bad Web Bot
๐ฉ๐ช
SMARTNET
2026-05-27 06:03:53
(1 month ago)
Aisuru(Mirai variant) DDoS | Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61
DDoS Attack
๐ซ๐ท
Sklurk
2026-05-20 11:57:09
(1 month ago)
Web App Attack
Web App Attack
๐ธ๐ฌ
mypatricks
2026-05-11 17:21:04
(2 months ago)
113.211.214.237 | Port: 13408 | DNS: 113.211.214.237 2026-05-12T01:21:03+08:00 Asia/Kuala_Lumpur | B ...
show more
113.211.214.237 | Port: 13408 | DNS: 113.211.214.237 2026-05-12T01:21:03+08:00 Asia/Kuala_Lumpur | Bad Behavior Activity | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /?route=common/currency/currency&code=AUD&redirect=%2F%2Fxxxxxx%2Ftracking%2F%3FAUD%3D%253FGBP%253FUSD | Ref: - | Country: MY/Malaysia/+08:00 IP City: Petaling Jaya 9fa2db9d6e3e3c6e-KUL/Kuala Lumpur, Malaysia 1 hits/0 secs Robots 3
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐ธ๐ฌ
mypatricks
2026-02-01 11:07:58
(5 months ago)
113.211.214.237 | Port: 11880 | DNS: 113.211.214.237 2026-02-01T19:07:57+08:00 Asia/Kuala_Lumpur | B ...
show more
113.211.214.237 | Port: 11880 | DNS: 113.211.214.237 2026-02-01T19:07:57+08:00 Asia/Kuala_Lumpur | Bad Behavior Activity | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /birthday-cakes-green-graduation/?e757d3f0951404d1560ed04cb=GBP&code=GBP | Ref: - | Country: MY/Malaysia/+08:00 IP City: Petaling Jaya 9c70fcf5ea473c56-KUL/Kuala Lumpur, Malaysia 1 hits/0 secs Robots 3
show less
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack