🇷🇸
Scan
2026-10-25 02:52:41
(5 hours ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
RAP
2026-10-24 22:02:19
(10 hours ago)
2026-10-24 22:02:19 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷
agroman93
2026-10-24 18:48:44
(13 hours ago)
T-Pot honeypot: 28 hits on ports [22, 23] (automated)
Port Scan
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-10-24 17:06:28
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 181.45.134.185 (cpe-181-45-134-185.telecentro-r ...
show more
(mod_security) mod_security (id:210350) triggered by 181.45.134.185 (cpe-181-45-134-185.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:06:21.113840 2026] [security2:error] [pid 26338:tid 26338] [client 181.45.134.185:25004] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "atzljRJl_CDqrncv6dp6awAAAAM"], referer: https://cbcfargo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-15 00:30:28
(1 week ago)
Calendar filter flood (L7 DDoS) | host: www.escrimeaura.fr | path: /calendrier-2/action~agenda/time_ ...
show more
Calendar filter flood (L7 DDoS) | host: www.escrimeaura.fr | path: /calendrier-2/action~agenda/time_limit~1763161200/cat_ids~644/tag_ids~401,217,757,577,500,671,224/request_format~json/ | src_port: 1955
show less
DDoS Attack
Web App Attack
🇵🇱
mkey
2026-10-13 07:45:02
(1 week ago)
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS= ...
show more
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-10-13 09:42:50 | LAST=2026-10-13 09:42:50. Last seen 2026-10-13 09:42:50.
show less
Port Scan
🇺🇸
xmission.com
2026-10-13 06:59:40
(1 week ago)
Blocked by UFW (TCP on 22)
Source port: 20542
TTL: 48
Packet length: 60
TOS: 0x00
This report (for ...
show more
Blocked by UFW (TCP on 22)
Source port: 20542
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 181.45.134.185) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
SSH
Brute-Force
🇺🇸
LotPhantom
2026-10-10 05:11:27
(2 weeks ago)
2026-10-10T05:11:26.937070+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ...
show more
2026-10-10T05:11:26.937070+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=181.45.134.185 DST=157.230.217.55 LEN=60 TOS=0x08 PREC=0x20 TTL=49 ID=41302 DF PROTO=TCP SPT=32958 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0
2026-10-10T05:11:26.937939+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=181.45.134.185 DST=157.230.217.55 LEN=60 TOS=0x08 PREC=0x20 TTL=49 ID=58950 DF PROTO=TCP SPT=41888 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking
🇹🇷
pashait
2026-10-04 15:17:20
(2 weeks ago)
Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m
SSH
Brute-Force
🇺🇸
TPI-Abuse
2026-09-30 04:36:33
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 181.45.134.185 (cpe-181-45-134-185.telecentro-r ...
show more
(mod_security) mod_security (id:210350) triggered by 181.45.134.185 (cpe-181-45-134-185.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:36:30.339074 2026] [security2:error] [pid 8496:tid 8496] [client 181.45.134.185:2056] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newcangroup.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newcangroup.com"] [uri "/"] [unique_id "aryRzh9ArGMxYuItvpUv3AAAAAE"], referer: https://seobacklinkmaker.website/dir/outreach-link-building-147159
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
flaus
2026-09-28 07:55:48
(3 weeks ago)
$f2bV_matches
Brute-Force
SSH
🇭🇰
CyberFox
2026-09-24 04:57:52
(1 month ago)
23/tcp (1 or more attempts)
Port Scan
🇷🇸
Scan
2026-09-24 00:17:04
(1 month ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
2026-09-22 13:36:53
(1 month ago)
Unauthorized access (22/tcp/ssh)
Port Scan
SSH
🇺🇸
thefuzz4
2026-09-21 08:16:20
(1 month ago)
SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22. Automated report.
Brute-Force
SSH
