๐ฉ๐ช
CK_beats
2026-06-12 13:02:01
(21 hours ago)
Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 5 hits, proto=tcp, ports=443
Port Scan
Hacking
๐ฉ๐ช
acadeova
2026-06-12 01:48:27
(1 day ago)
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฉ๐ช
acadeova
2026-06-05 09:10:24
(1 week ago)
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐บ๐ธ
MPL
2026-05-29 00:18:37
(2 weeks ago)
tcp/443 (5 or more attempts)
Port Scan
๐ฉ๐ช
acadeova
2026-05-25 12:39:05
(2 weeks ago)
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฉ๐ช
acadeova
2026-05-21 08:27:49
(3 weeks ago)
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฆ๐บ
trentwiles.com
2026-05-04 20:48:09
(1 month ago)
Unauthorized connection attempt detected from IP address 172.70.181.133 to port 80 [SYD]
Port Scan
๐ฆ๐บ
trentwiles.com
2026-04-27 05:52:29
(1 month ago)
Unauthorized connection attempt detected from IP address 172.70.181.133 to port 443 [SYD]
Port Scan
๐ฉ๐ช
acadeova
2026-04-26 13:27:27
(1 month ago)
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฉ๐ช
acadeova
2026-04-11 18:16:31
(2 months ago)
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฉ๐ช
acadeova
2026-03-14 13:42:30
(2 months ago)
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=52
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=52
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฉ๐ช
acadeova
2026-03-11 05:45:22
(3 months ago)
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.70.181.133
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฌ๐ง
OptimusGO
2026-02-07 07:01:44
(4 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-02-07 07:01:34 UTC
Log evidence:
02/07/2026-06:51:18.398093 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 172.70.181.133:46341 -> 185.127.18.66:2096
02/07/2026-06:51:19.304249 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 172.70.181.133:46859 -> 185.127.18.66:2096
show less
Port Scan
Brute-Force
๐ฉ๐ช
2048
2026-02-02 19:29:38
(4 months ago)
2026-02-02T20:29:33.552984+01:00 machodeer kernel: [2092805.795702] [UFW BLOCK] IN=ens3 OUT= MAC=RED ...
show more
2026-02-02T20:29:33.552984+01:00 machodeer kernel: [2092805.795702] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.70.181.133 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=55215 DF PROTO=TCP SPT=34311 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-02-02T20:29:34.457387+01:00 machodeer kernel: [2092806.701046] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.70.181.133 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=20534 DF PROTO=TCP SPT=16933 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-02-02T20:29:35.358346+01:00 machodeer kernel: [2092807.601517] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.70.181.133 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=17459 DF PROTO=TCP SPT=43625 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0
show less
Port Scan
Anonymous
2026-01-21 10:58:47
(4 months ago)
invalid request
Bad Web Bot
Web App Attack