🇺🇸
ISPLtd
2026-06-15 06:02:29
(21 hours ago)
Jun 15 00:02:28 172.183.95.145 TCP SPT=21184 DPT=2087 SYN
Jun 15 00:02:28 172.183.95.145 TCP SPT=211 ...
show more
Jun 15 00:02:28 172.183.95.145 TCP SPT=21184 DPT=2087 SYN
Jun 15 00:02:28 172.183.95.145 TCP SPT=21194 DPT=2078 SYN
Jun 15 00:02:28 172.183.95.145 TCP SPT=21188 DPT=2083 WINDO
...
show less
Port Scan
🇹🇭
Sawasdee
2026-06-15 03:30:13
(23 hours ago)
Unwanted checking 80 or 443 port
...
Bad Web Bot
🇺🇸
Axel
2026-06-15 02:15:55
(1 day ago)
Blocked by UFW on MVI [2077/tcp] | SPT: 20742 | TTL: 47 | LEN: 60 | TOS: 0x00 • Reported by: github. ...
show more
Blocked by UFW on MVI [2077/tcp] | SPT: 20742 | TTL: 47 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇷🇸
Scan
2026-06-15 00:51:09
(1 day ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
Cyber Crusader
2026-06-14 21:47:40
(1 day ago)
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
🇩🇪
Phenix Info
2026-06-10 04:52:58
(5 days ago)
SmallGuard.fr/Prestashop Forbidden Ext.
Web App Attack
🇫🇷
COMAITE
2026-06-10 03:04:07
(6 days ago)
Suspicious URL access.
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 02:30:37
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.183.95.145 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.183.95.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 22:30:29.619358 2026] [security2:error] [pid 452:tid 452] [client 172.183.95.145:33388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.28"] [uri "/.git/HEAD"] [unique_id "aijMRSnGxASpb00Zi49GSQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
cwytech
2026-06-10 02:28:46
(6 days ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-sensitive-files.
Bad Web Bot
Web App Attack
2026-06-10 01:48:29
(6 days ago)
Jun 9 21:48:28 localhost kernel: [109401410.504838] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ...
show more
Jun 9 21:48:28 localhost kernel: [109401410.504838] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.183.95.145 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=49 ID=12385 DF PROTO=TCP SPT=33668 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0
Jun 9 21:48:28 localhost kernel: [109401410.504859] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.183.95.145 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=49 ID=12385 DF PROTO=TCP SPT=33668 DPT=2087 SEQ=3353602921 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405A00402080A6FDE1218000000000103030A)
Jun 9 21:48:28 localhost kernel: [109401410.506982] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=172.183.95.145 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=47 ID=29995 DF PROTO=TCP SPT=32831 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0
Jun 9 21:48:28 localhost kernel: [109401410.512136] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-10 01:04:16
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.183.95.145 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.183.95.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 21:04:13.071596 2026] [security2:error] [pid 17585:tid 17585] [client 172.183.95.145:34405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.22"] [uri "/.git/HEAD"] [unique_id "aii4DZjCk9qw3dAqCgu85wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
Scan
2026-06-10 00:24:11
(6 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇧🇾
lns.bz
2026-06-09 00:01:23
(1 week ago)
.env scanning [BY]
Web App Attack
🇩🇪
DEV-DNS
2026-06-08 07:00:15
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇧🇾
lns.bz
2026-06-08 06:33:52
(1 week ago)
Too many 404 requests [BY]
Web App Attack