🇸🇬
serverutama
2026-07-10 13:15:34
(13 hours ago)
[fail2ban nginx-444] Scanner/bot: request berulang diblok nginx (444) — probe path sensitif (.env/.g ...
show more
[fail2ban nginx-444] Scanner/bot: request berulang diblok nginx (444) — probe path sensitif (.env/.git/wp/cgi) | bukti: 154.12.61.238 - - [10/Jul/2026:13:15:31 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0" "-"
154.12.61.238 - - [10/Jul/2026:13:15:31 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" "-"
154.12.61.238 - - [10/Jul/2026:13:15:32 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-"
154.12.61.238 - - [10/Jul/2026:13:15:32 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" "-"
154.12.61.238 - - [10/Jul/2026:13:15:33 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safar
show less
Port Scan
Bad Web Bot
Web App Attack
🇫🇷
Security_Whaller
2026-07-10 07:00:28
(19 hours ago)
Malicious activity detected on Honeypot.
Brute-Force
Hacking
Web App Attack
🇸🇬
WMK965
2026-07-08 15:59:35
(2 days ago)
154.12.61.238 - - [08/Jul/2026:23:59:34 +0800] "\x16\x03\x01\x05\xD4\x01\x00\x05\xD0\x03\x03\x9C\xB7 ...
show more
154.12.61.238 - - [08/Jul/2026:23:59:34 +0800] "\x16\x03\x01\x05\xD4\x01\x00\x05\xD0\x03\x03\x9C\xB7\xBE\x1B+\xBC\xC1\x96\xA05\xFDD!\x1D\x03\x98y\xCA\xEAeW\xBDD\x94." 400 154 "-" "-" "-"
154.12.61.238 - - [08/Jul/2026:23:59:34 +0800] "\x16\x03\x01\x05\xD4\x01\x00\x05\xD0\x03\x03\xCB\xC5\x0E;M\xA3s\xF4\x90|K\x81%n\x1Dq \x19\xE8\x18\xC9}:\xC32}Tw&\xF50\x09 H\x04\x0B\x90z-g\xB6\x9C4\xC3w\xC3 \xE4\xA1&w\x83G" 400 154 "-" "-" "-"
154.12.61.238 - - [08/Jul/2026:23:59:34 +0800] "\x16\x03\x01\x05\xD4\x01\x00\x05\xD0\x03\x03\xAD+VR\xA5$\x9C\xEF\x0B\xD7\x86\x9A\xD8M\xD5\xAD\xDA\x16\xC9 l\x06\xCDo\xFF\xC5\xE6\x80\xD8\x07\xBC\x8D \x9C\xEC.\xC9\xD3\x81\xD5\x12$\x9A\xE2\x9D\xB5\x1C\xD6,\x9DF\xF3f\xC0\xBD\xD1@\xBF4Ep\x8C\xC9\x948\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 154 "-" "-" "-"
show less
Port Scan
Web App Attack
🇦🇺
dyln
2026-07-07 14:14:55
(3 days ago)
Dyls honeypot brute-force: proto8 (8 total hits)
Brute-Force
🇦🇺
dyln
2026-07-07 00:58:41
(4 days ago)
Dyls honeypot brute-force: proto8 (7 total hits)
Brute-Force
🇦🇺
dyln
2026-07-05 21:54:46
(5 days ago)
Dyls honeypot brute-force: proto8 (4 total hits)
Brute-Force
🇸🇬
anotherwatcher
2026-07-05 16:23:24
(5 days ago)
bad bot
Bad Web Bot
🇹🇷
Threat.live
2026-07-01 20:00:03
(1 week ago)
Suspicious Connection Attempts
Brute-Force
🇸🇬
securejdprop
2026-07-01 19:55:23
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Suspicious 👀 ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Suspicious 👀 SSL/TLS trafic on unusual SSL/TLS port). Ip 154.12.61.238 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-07-01 19:55:21.242736915 +0000 UTC
show less
Hacking
Web App Attack
2026-07-01 11:31:39
(1 week ago)
Unauthorized access (80/tcp/http)
Port Scan
Web App Attack
🇫🇷
Duggy_Tuxy🧱
2026-07-01 06:50:17
(1 week ago)
[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Web Attack)
Web App Attack
Port Scan
Hacking
🇳🇱
VMHeaven.io
2026-06-29 20:31:21
(1 week ago)
Blocked by UFW [80/tcp]
Source port: 47322
TTL: 35
Packet length: 44
Port Scan
Web App Attack