๐ฎ๐ช
RoboSOC
2026-07-03 10:59:31
(3 months ago)
Port 22 Scan, PTR: None
Port Scan
๐ฌ๐ง
OptimusGO
2026-07-03 06:52:05
(3 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-07-03 07:52:05 UTC
Log evidence:
07/03/2026-07:52:04.012198 [wDrop] [**] [1:7001101:1] FINSERV CRITICAL: Telnet Access Blocked [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 162.243.94.114:16896 -> 185.127.18.66:23
07/03/2026-07:52:04.012198 [**] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 162.243.94.114:16896 -> 185.127.18.66:23
show less
Port Scan
Brute-Force
๐ง๐ท
ICS Labs
2026-06-22 16:08:01
(3 months ago)
ICS Labs identified 162.243.94.114 as a malicious indicator from threat intelligence.
DDoS Attack
Port Scan
Hacking
Brute-Force
Exploited Host
๐บ๐ธ
sefinek.net
2026-06-15 00:29:03
(3 months ago)
Blocked by UFW on NY01 [554/tcp] | SPT: 12467 | TTL: 118 | LEN: 44 | TOS: 0x08 โข Reported by: github ...
show more
Blocked by UFW on NY01 [554/tcp] | SPT: 12467 | TTL: 118 | LEN: 44 | TOS: 0x08 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ฉ๐ช
Sandro
2026-06-14 19:44:56
(4 months ago)
Honeypot [tpot]: HTTP/1.1 request on 18789
GET /
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show more
Honeypot [tpot]: HTTP/1.1 request on 18789
GET /
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 18789 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Hacking
Bad Web Bot
๐ฎ๐น
RaffOne
2026-06-14 01:11:04
(4 months ago)
SSH - Attempt to login using invalid or illegal credential
Brute-Force
SSH
๐ฉ๐ช
guldkage
2026-06-13 14:42:24
(4 months ago)
Unauthorized connection attempt detected from IP address 162.243.94.114 to port 8443 (ger-03) [k]
Brute-Force
Exploited Host
Anonymous
2026-06-13 06:25:27
(4 months ago)
Try to connect to Port_Scan_3389_stealth
Port Scan
๐ธ๐ฌ
celestialcity
2026-06-12 23:52:19
(4 months ago)
Blocked by UFW on celestialcityas [7547/tcp] | SPT: 15529 | TTL: 107 | LEN: 44 | TOS: 0x00 โข Reporte ...
show more
Blocked by UFW on celestialcityas [7547/tcp] | SPT: 15529 | TTL: 107 | LEN: 44 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
IoT Targeted
๐ง๐ท
maviei
2026-06-09 21:39:21
(4 months ago)
2026-06-09T18:39:20.390692-03:00 srv01 kernel: [575526.840860] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ...
show more
2026-06-09T18:39:20.390692-03:00 srv01 kernel: [575526.840860] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=162.243.94.114 DST=177.19.138.245 LEN=232 TOS=0x00 PREC=0x00 TTL=114 ID=45903 DF PROTO=UDP SPT=10565 DPT=500 LEN=212
2026-06-09T18:39:20.390864-03:00 srv01 kernel: [575526.840929] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=162.243.94.114 DST=177.19.138.245 LEN=76 TOS=0x00 PREC=0x00 TTL=114 ID=45903 DF PROTO=UDP SPT=10565 DPT=500 LEN=56
2026-06-09T18:39:20.390896-03:00 srv01 kernel: [575526.840946] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=162.243.94.114 DST=177.19.138.245 LEN=220 TOS=0x00 PREC=0x00 TTL=114 ID=45903 DF PROTO=UDP SPT=10565 DPT=500 LEN=200
...
show less
Port Scan
๐บ๐ธ
MPL
2026-06-09 09:36:23
(4 months ago)
tcp/18789
Port Scan
๐ซ๐ท
security.rdmc.fr
2026-06-09 02:26:02
(4 months ago)
VoIP Attack proto:UDP src:18839 dst:5060
Port Scan
Fraud VoIP
Anonymous
2026-06-07 09:53:07
(4 months ago)
Reported from Nginx log analysis 17. Log: 162.243.94.114 - - [07/Jun/2026:xx:xx:xx 0200] "GET / HTT ...
show more
Reported from Nginx log analysis 17. Log: 162.243.94.114 - - [07/Jun/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "-" "US United States Secaucus" "AS14061" "DigitalOcean, LLC"
show less
Port Scan
Brute-Force
SSH
๐ซ๐ฎ
agaesteves
2026-06-07 09:19:35
(4 months ago)
[SISHIPISMO 360] TipoAtaque.SCANNER_UA | User-Agent de scanner detectado: Go-http-client/1.1 | Paths ...
show more
[SISHIPISMO 360] TipoAtaque.SCANNER_UA | User-Agent de scanner detectado: Go-http-client/1.1 | Paths: /robots.txt | UA: Go-http-client/1.1
show less
Web App Attack
๐ซ๐ท
aki
2026-06-05 08:33:59
(4 months ago)
Drop:
...
Port Scan