๐ซ๐ฎ
gnom4ik
2026-06-02 19:20:18
(4 days ago)
ban-reviewer auto report; ip=198.46.166.157; scenario=http:scan; verdict=valid_ban; confidence=0.92; ...
show more
ban-reviewer auto report; ip=198.46.166.157; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high
show less
Port Scan
Hacking
Brute-Force
SSH
๐ฎ๐น
Progetto1
2026-05-13 02:05:03
(3 weeks ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
Anonymous
2026-05-08 14:46:57
(4 weeks ago)
This IP was involved in an brute force and password spray attack on 2026/05/08 09:44:40
Port Scan
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-05-06 04:02:38
(1 month ago)
2026-05-05 19:00:27,864 fail2ban.actions [3625835]: NOTICE [tor] Ban 198.46.166.157
2026-05- ...
show more
2026-05-05 19:00:27,864 fail2ban.actions [3625835]: NOTICE [tor] Ban 198.46.166.157
2026-05-05 22:00:25,413 fail2ban.actions [3625835]: NOTICE [tor] Ban 198.46.166.157
2026-05-06 01:00:24,931 fail2ban.actions [3625835]: NOTICE [tor] Ban 198.46.166.157
2026-05-06 04:00:33,348 fail2ban.actions [3625835]: NOTICE [tor] Ban 198.46.166.157
2026-05-06 07:02:38,003 fail2ban.actions [3625835]: NOTICE [tor] Ban 198.46.166.157
show less
Brute-Force
Anonymous
2026-04-24 21:02:47
(1 month ago)
2026-04-24 12:00:28,429 fail2ban.actions [7718]: NOTICE [tor] Ban 198.46.166.157
2026-04-24 ...
show more
2026-04-24 12:00:28,429 fail2ban.actions [7718]: NOTICE [tor] Ban 198.46.166.157
2026-04-24 15:00:26,611 fail2ban.actions [7718]: NOTICE [tor] Ban 198.46.166.157
2026-04-24 18:00:28,262 fail2ban.actions [7718]: NOTICE [tor] Ban 198.46.166.157
2026-04-24 21:00:37,482 fail2ban.actions [7718]: NOTICE [tor] Ban 198.46.166.157
2026-04-25 00:02:47,153 fail2ban.actions [7718]: NOTICE [tor] Ban 198.46.166.157
show less
Brute-Force
Anonymous
2026-04-20 18:10:24
(1 month ago)
This IP was involved in an brute force and password spray attack on 2026/04/20 13:07:44
Port Scan
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-04-18 10:28:03
(1 month ago)
Automated bot traffic โ residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ...
show more
Automated bot traffic โ residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
Shouddy Tarano
2026-04-08 02:30:17
(1 month ago)
[Tue Apr 07 20:30:13.722496 2026] [authz_core:error] [pid 1675616:tid 139662060381952] [client 198.4 ...
show more
[Tue Apr 07 20:30:13.722496 2026] [authz_core:error] [pid 1675616:tid 139662060381952] [client 198.46.166.157:38060] AH01630: client denied by server configuration: /var/www/cgi-bin/
[Tue Apr 07 20:30:14.657219 2026] [authz_core:error] [pid 1675616:tid 139661942884096] [client 198.46.166.157:38060] AH01630: client denied by server configuration: /var/www/cgi-bin/lp
[Tue Apr 07 20:30:15.036689 2026] [authz_core:error] [pid 1675616:tid 139662018418432] [client 198.46.166.157:38060] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/scripts
[Tue Apr 07 20:30:15.687249 2026] [authz_core:error] [pid 1675616:tid 139662026811136] [client 198.46.166.157:38060] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/scripts
[Tue Apr 07 20:30:16.016883 2026] [authz_core:error] [pid 1675616:tid 139661984847616] [client 198.46.166.157:38060] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/
...
show less
DDoS Attack
Web Spam
Brute-Force
Web App Attack
Anonymous
2026-03-17 20:00:38
(2 months ago)
2026-03-17 11:00:08,447 fail2ban.actions [3511917]: NOTICE [tor] Ban 198.46.166.157
2026-03- ...
show more
2026-03-17 11:00:08,447 fail2ban.actions [3511917]: NOTICE [tor] Ban 198.46.166.157
2026-03-17 13:00:49,110 fail2ban.actions [3511917]: NOTICE [tor] Ban 198.46.166.157
2026-03-17 16:00:28,293 fail2ban.actions [3511917]: NOTICE [tor] Ban 198.46.166.157
2026-03-17 19:00:58,881 fail2ban.actions [3511917]: NOTICE [tor] Ban 198.46.166.157
2026-03-17 22:00:26,960 fail2ban.actions [3511917]: NOTICE [tor] Ban 198.46.166.157
show less
Brute-Force
๐ฎ๐ณ
liveaspankaj
2026-03-14 18:03:21
(2 months ago)
DDoS attack: 71 requests in 5m (GET / or repair.php).
DDoS Attack
๐บ๐ธ
gu-alvareza
2026-02-23 07:05:08
(3 months ago)
Bash.Function.Definitions.Remote.Code.Execution
Hacking
Web App Attack
๐ช๐ธ
gnom4ik
2026-02-20 20:39:01
(3 months ago)
ban-reviewer auto report; ip=198.46.166.157; scenario=http:scan; verdict=valid_ban; confidence=0.90; ...
show more
ban-reviewer auto report; ip=198.46.166.157; scenario=http:scan; verdict=valid_ban; confidence=0.90; categories=14,15,18; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); AbuseIPDB categories include Port Scan (14) and Hacking (15), consistent with scan/exploit patterns; Decision stats show 2 active decisions in lookback window, indicating repeated suspicious beha
show less
Port Scan
Hacking
Brute-Force
๐บ๐ธ
gu-alvareza
2026-02-14 07:05:10
(3 months ago)
Cross.Site.Scripting
Hacking
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-02-02 22:59:55
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-02-01.
show less
Hacking
Web App Attack
SSH
๐บ๐ธ
gu-alvareza
2026-02-02 07:05:09
(4 months ago)
Generic.Path.Traversal.Detection
Port Scan