🇺🇸
st_ps
2026-03-03 08:35:47
(3 months ago)
192.166.82.59 - - [03/Mar/2026:00:35:45 -0800] "GET http://www.gstatic.com/generate_204 HTTP/1.1" 40 ...
show more
192.166.82.59 - - [03/Mar/2026:00:35:45 -0800] "GET http://www.gstatic.com/generate_204 HTTP/1.1" 400 248 "-" "-"
192.166.82.59 - - [03/Mar/2026:00:35:45 -0800] "\x04\x01\x00P\x00\x00\x00\x01\x00www.gstatic.com\x00" 400 150 "-" "-"
192.166.82.59 - - [03/Mar/2026:00:35:45 -0800] "CONNECT www.gstatic.com:80 HTTP/1.1" 400 150 "-" "-"
192.166.82.59 - - [03/Mar/2026:00:35:45 -0800] "CONNECT www.gstatic.com:80 HTTP/1.1" 400 150 "-" "-"
192.166.82.59 - - [03/Mar/2026:00:35:45 -0800] "GET http://connect.rom.miui.com/generate_204 HTTP/1.1" 400 248 "-" "-"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
wiredalter
2026-03-02 02:16:55
(3 months ago)
Blocked by fail2ban on cVPS [8888/tcp]
Source Port: 44478
TTL: 242
Packet Length: 44
TOS: 0x00
Anal ...
show more
Blocked by fail2ban on cVPS [8888/tcp]
Source Port: 44478
TTL: 242
Packet Length: 44
TOS: 0x00
Analyzed by https://ip.wiredalter.com
show less
Brute-Force
SSH
🇬🇧
andypiper
2026-03-02 02:00:51
(3 months ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇺🇸
MPL
2026-03-02 01:42:27
(3 months ago)
tcp ports: 9050,8888 (3 or more attempts)
Port Scan
🇺🇸
tophers
2026-03-02 01:30:48
(3 months ago)
3 attempts, ports 80/443
Web App Attack
🇨🇭
pingusurmars
2026-03-02 01:29:31
(3 months ago)
Blocked by UFW on amperetwo [3128/tcp]
Source port: 44494
TTL: 241
Packet length: 44
TOS: 0x00
This ...
show more
Blocked by UFW on amperetwo [3128/tcp]
Source port: 44494
TTL: 241
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇦🇺
trentwiles.com
2026-03-02 01:14:27
(3 months ago)
Unauthorized connection attempt detected from IP address 192.166.82.59 to port 9999 [SYD]
Port Scan
🇺🇸
xmission.com
2026-03-02 01:12:58
(3 months ago)
Blocked by UFW (TCP on 3128)
Source port: 44478
TTL: 247
Packet length: 44
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 3128)
Source port: 44478
TTL: 247
Packet length: 44
TOS: 0x08
This report (for 192.166.82.59) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2026-03-02 01:09:59
(3 months ago)
(mod_security) mod_security (id:217210) triggered by 192.166.82.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217210) triggered by 192.166.82.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 20:09:52.795659 2026] [security2:error] [pid 17737:tid 17737] [client 192.166.82.59:60674] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.gstatic.com:80|F|4"] [data "CONNECT www.gstatic.com:80 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gstatic.com"] [uri "/"] [unique_id "aaTjYEBICCYn6ONYXHPU0QAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-03-02 01:05:38
(3 months ago)
tcp port scan (13 or more attempts)
Port Scan
🇺🇸
xmission.com
2026-03-02 00:57:16
(3 months ago)
Blocked by UFW (TCP on 9050)
Source port: 44478
TTL: 247
Packet length: 44
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 9050)
Source port: 44478
TTL: 247
Packet length: 44
TOS: 0x08
This report (for 192.166.82.59) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2026-03-02 00:34:33
(3 months ago)
Blocked by UFW (TCP on 1080)
Source port: 44478
TTL: 247
Packet length: 44
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 1080)
Source port: 44478
TTL: 247
Packet length: 44
TOS: 0x08
This report (for 192.166.82.59) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2026-03-02 00:34:26
(3 months ago)
(mod_security) mod_security (id:217210) triggered by 192.166.82.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217210) triggered by 192.166.82.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 19:34:18.210505 2026] [security2:error] [pid 18547:tid 18547] [client 192.166.82.59:48292] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.gstatic.com:80|F|4"] [data "CONNECT www.gstatic.com:80 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gstatic.com"] [uri "/"] [unique_id "aaTbCo7Izj2EZK2ZsTmbgQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
donarev419
2026-03-02 00:29:36
(3 months ago)
Connection to port 7890 with data transfer.
Data preview:
Port Scan
Hacking
🇺🇸
LotPhantom
2026-03-02 00:09:32
(3 months ago)
2026-03-02T00:09:31.504738+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ...
show more
2026-03-02T00:09:31.504738+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=192.166.82.59 DST=157.230.217.55 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=2711 PROTO=TCP SPT=44478 DPT=3128 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking