Blocked by UFW (TCP on 23)
Source port: 42808
TTL: 46
Packet length: 60
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 23)
Source port: 42808
TTL: 46
Packet length: 60
TOS: 0x08
This report (for 190.83.2.176) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
Anonymous
denied traffic to a honeypot network. destination port 23.
ELEVATED_THREAT | 134 IPs targeting /brand/satco-products-inc.html | Facet request during elevated t ...
show moreELEVATED_THREAT | 134 IPs targeting /brand/satco-products-inc.html | Facet request during elevated threat (facet_ratio=0.99, unique_ips=719) | Recv-Q=1489 bytes on ESTABLISHED connection (threshold=1000)
show less
[Thu May 28 16:31:31.704742 2026] [security2:error] [pid 585427:tid 139852222793408] [client 190.83. ...
show more[Thu May 28 16:31:31.704742 2026] [security2:error] [pid 585427:tid 139852222793408] [client 190.83.2.176:43040] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-tahunan Request Basename = infografis-tahunan"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec
...
show less
2026-05-23 22:12:48 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.23 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.12.23 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
scanning http requests from known botnet
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ