Detected empty referer, indicating web scraping / abusive scanning with UA: "Mozilla/5.0 (X11; Linux ...
show moreDetected empty referer, indicating web scraping / abusive scanning with UA: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" and uri: "/index.php"
show less
2026-10-15T09:42:32.894815+02:00 ubuntu-server sshd[1058437]: banner exchange: Connection from 164.9 ...
show more2026-10-15T09:42:32.894815+02:00 ubuntu-server sshd[1058437]: banner exchange: Connection from 164.92.204.28 port 39452: invalid format
...
show less
Blocked by UFW (TCP on 3000)
Source port: 61004
TTL: 235
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 3000)
Source port: 61004
TTL: 235
Packet length: 44
TOS: 0x08
This report (for 164.92.204.28) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[Honeypot] Malicious activity detected by honeypot on port 3389. IP attempted unauthorized access to ...
show more[Honeypot] Malicious activity detected by honeypot on port 3389. IP attempted unauthorized access to decoy service. Original message: RDP brute force attack from honeypot - User: connection_attempt. Attempted credentials captured.
show less
Brute-Force
Web App Attack
Anonymous
DNS Compromise
DDoS Attack
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ