🇳🇱
ras07
2026-10-21 16:00:06
(1 day ago)
Brute force SSH login attempts.
Brute-Force
SSH
🇷🇸
Scan
2026-10-08 02:11:18
(2 weeks ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
2026-09-21 08:39:12
(1 month ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
🇳🇱
DrLex0
2026-07-30 10:55:56
(2 months ago)
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ...
show more
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop.
14.192.213.239 443 - [30/Jul/2026:10:55:56 +0000] "GET [redacted] HTTP/1.1" 503 6180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
show less
Bad Web Bot
Exploited Host
🇩🇪
botreporter
2026-07-05 01:13:07
(3 months ago)
botnet ignoring robots.txt
Bad Web Bot
🇳🇱
i-turnradio.nl
2026-03-19 05:50:17
(7 months ago)
2026-03-19 06:50:16 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 12:17:17
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 14.192.213.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 14.192.213.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 08:17:13.667268 2026] [security2:error] [pid 4689:tid 4689] [client 14.192.213.239:10212] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ourodyssey.us|F|2"] [data ".blogspot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ourodyssey.us"] [uri "/ourodyssey.blogspot.com"] [unique_id "abf0yQqZ6rubKtIL4N64ewAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Telemetry2U.com
2026-02-23 02:50:06
(7 months ago)
SQL Injection attempt detected
Web App Attack
SQL Injection
🇧🇷
hostseries
2026-02-20 13:27:19
(8 months ago)
Trigger: LF_DISTATTACK
Brute-Force
🇨🇿
lp
2025-11-21 08:53:03
(11 months ago)
Email account brute force: 5 attempts were recorded from 14.192.213.239
2025-11-21T08:13:05+01:00 wa ...
show more
Email account brute force: 5 attempts were recorded from 14.192.213.239
2025-11-21T08:13:05+01:00 warning: unknown[14.192.213.239]: SASL PLAIN authentication failed: authentication failure, [email protected]
2025-11-21T08:13:05+01:00 warning: unknown[14.192.213.239]: SASL LOGIN authentication failed: authentication failure, [email protected]
2025-11-21T08:15:07+01:00 warning: unknown[14.192.213.239]: SASL PLAIN authentication failed: authentication failure, [email protected]
2025-11-21T08:15:07+01:00 warning: unknown[14.192.213.239]: SASL LOGIN authentication failed: authentication failure, [email protected]
2025-11-21T08:15:13+01:00 warning: unknown[14.192.213.239]: SASL PLAIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
🇩🇪
Ticlem
2025-09-19 19:02:10
(1 year ago)
2025-09-19T20:32:51.270789+02:00 clement-turlure kernel: [524796.519866] [UFW BLOCK] IN=enp0s31f6 OU ...
show more
2025-09-19T20:32:51.270789+02:00 clement-turlure kernel: [524796.519866] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=14.192.213.239 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=109 ID=51139 PROTO=UDP SPT=23443 DPT=6881 LEN=123
2025-09-19T20:47:30.310872+02:00 clement-turlure kernel: [525675.558358] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=14.192.213.239 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=109 ID=51140 PROTO=UDP SPT=23443 DPT=6881 LEN=123
2025-09-19T21:02:10.131985+02:00 clement-turlure kernel: [526555.377977] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=14.192.213.239 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=109 ID=51141 PROTO=UDP SPT=23443 DPT=6881 LEN=123
...
show less
Port Scan
🇷🇺
nyuuzyou
2025-09-17 08:18:18
(1 year ago)
{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "1433", "server": "mssql_server", "src_i ...
show more
{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "1433", "server": "mssql_server", "src_ip": "14.192.213.239", "src_port": "21938", "timestamp": "2025-09-17T08:18:08.049550"}
show less
Port Scan
Brute-Force
🇷🇺
nyuuzyou
2025-07-26 23:15:53
(1 year ago)
{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "1433", "server": "mssql_server", "src_i ...
show more
{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "1433", "server": "mssql_server", "src_ip": "14.192.213.239", "src_port": "14962", "timestamp": "2025-07-26T23:15:08.509326"}
show less
Port Scan
Brute-Force
2025-01-13 13:08:46
(1 year ago)
Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
2024-12-06 23:12:14
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host