🇯🇵
jsys
2026-11-08 03:16:01
UTC ·
(1 day ago)
Automated report (nfacl NetFlow analysis, 300s window): port scan (97 distinct dst ports); host sweep (256 distinct dst hosts); abnormally high flow rate (2022 flows/min); SYN-flood-like small-packet flows (10112 small-packet flows)
DDoS Attack
Port Scan
🇺🇸
NetGuard
2026-10-30 21:41:46
UTC ·
(1 week ago)
#honeypot #netguard247 #sentrypeer
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-10-28T09:23:25.767+00:00
Attacker IP: 167.172.72.239 | Port: 5060 | Country: Singapore
Honeypot: sentrypeer | Attack: unknown
Activity: 3 ...
show more
#honeypot #netguard247 #sentrypeer
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-10-28T09:23:25.767+00:00
Attacker IP: 167.172.72.239 | Port: 5060 | Country: Singapore
Honeypot: sentrypeer | Attack: unknown
Activity: 3 hits on port 5060 between 2026-10-28T09:23:25.767+00:00 and 2026-10-28T09:23:44.832+00:00 (6h window 2026-10-28T06:00:00.000Z)
Source: NetGuard 24/7 (netguard24-7.com) | PhantomGrid Defense
show less
Web App Attack
🇧🇷
ICS Labs
2026-10-29 16:37:11
UTC ·
(1 week ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-29 UTC.
Brute-Force
2026-10-28 09:23:39
UTC ·
(1 week ago)
2026-10-28T05:23:27.527287-04:00 localhost kernel: [148303.742818] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=167.172.72.239 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=238 ID=11605 PROTO=UDP SPT=48554 DPT ...
show more
2026-10-28T05:23:27.527287-04:00 localhost kernel: [148303.742818] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=167.172.72.239 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=238 ID=11605 PROTO=UDP SPT=48554 DPT=111 LEN=48
2026-10-28T05:23:27.527307-04:00 localhost kernel: [148303.742857] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=167.172.72.239 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=238 ID=11605 PROTO=UDP SPT=48554 DPT=111 LEN=48
2026-10-28T05:23:39.178820-04:00 localhost kernel: [148315.387246] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=167.172.72.239 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=235 ID=56413 PROTO=UDP SPT=49741 DPT=111 LEN=48
show less
Port Scan
🇫🇷
Sklurk
2026-08-19 02:23:08
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
kosada.com
2026-08-18 17:14:46
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-29 06:06:37
UTC ·
(3 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇦🇺
Anytech
2026-07-18 20:14:03
UTC ·
(3 months ago)
Blocked by Conn-Monitor
DDoS Attack
Web App Attack
🇨🇦
1gz
2026-07-09 02:48:02
UTC ·
(4 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/kujdes-nga-mjegulla-ne-rruge-ja-si-pritet-te-ndryshoje-moti-gjate-dites-se-sotme-ne-mbremje/1
UA: Mozilla/5.0 (Windows NT 10.0; Wi ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/kujdes-nga-mjegulla-ne-rruge-ja-si-pritet-te-ndryshoje-moti-gjate-dites-se-sotme-ne-mbremje/1
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
SpaceHost-Server
2026-07-04 22:28:14
UTC ·
(4 months ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-03 22:28:11
UTC ·
(4 months ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-07-03 04:06:16
UTC ·
(4 months ago)
2026/07/03 04:06:15 [error] 1102792#1102792: *347079503 access forbidden by rule, client: 167.172.72.239, server: binixo.com.ar, request: "GET /wp-content/uploads/2018/04/Monto-del-cr%C3%A9dito.jpg HTTP/2.0", host: "binixo.com.ar", referrer: "https:/ ...
show more
2026/07/03 04:06:15 [error] 1102792#1102792: *347079503 access forbidden by rule, client: 167.172.72.239, server: binixo.com.ar, request: "GET /wp-content/uploads/2018/04/Monto-del-cr%C3%A9dito.jpg HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/"
2026/07/03 04:06:15 [error] 1102792#1102792: *347079505 access forbidden by rule, client: 167.172.72.239, server: binixo.com.ar, request: "GET /wp-content/uploads/2017/12/26907262_195920164324073_7961085592941829299_n-150x150.jpg HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/"
2026/07/03 04:06:15 [error] 1102792#1102792: *347079509 access forbidden by rule, client: 167.172.72.239, server: binixo.com.ar, request: "GET /wp-content/themes/donna/img/why/costs.png HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/"
...
show less
Web App Attack
🇫🇷
Sklurk
2026-07-01 01:30:53
UTC ·
(4 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-05-24 10:21:26
UTC ·
(5 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-05-14 01:47:16
UTC ·
(5 months ago)
Web App Attack
Web App Attack
