2026-09-16 11:48:55
(2 days ago)
MikroTik Enterprise Honeypot
Port Scan
2026-09-09 16:35:27
(1 week ago)
PROTO=TCP DPT=2082
Port Scan
Hacking
🇩🇪
dpsbs
2026-09-09 12:56:02
(1 week ago)
multiple ips intrustions detected
Hacking
2026-09-09 08:49:27
(1 week ago)
denied traffic to a honeypot network. destination port 80.
Port Scan
Hacking
🇬🇧
Axel
2026-09-09 08:40:06
(1 week ago)
Blocked by UFW on BGPGB [443/tcp] | SPT: 63425 | TTL: 106 | LEN: 40 | TOS: 0x00 • Reported by: githu ...
show more
Blocked by UFW on BGPGB [443/tcp] | SPT: 63425 | TTL: 106 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-15 05:34:18
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 20.83.159.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 20.83.159.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:34:10.264510 2026] [security2:error] [pid 14839:tid 14839] [client 20.83.159.8:55710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.30"] [uri "/.git/HEAD"] [unique_id "ai-O0vxMhyT5DYLAB6kabAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
OptimusGO
2026-06-15 05:30:42
(3 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-06-15 06:30:42 UTC
Log evidence:
06/15/2026-06:30:41.127830 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 20.83.159.8:55960 -> 185.127.18.66:2077
06/15/2026-06:30:41.128456 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 20.83.159.8:55954 -> 185.127.18.66:2087
show less
Port Scan
Brute-Force
🇺🇸
Axel
2026-06-15 05:07:41
(3 months ago)
Blocked by UFW on MVI [2078/tcp] | SPT: 54400 | TTL: 47 | LEN: 60 | TOS: 0x00 • Reported by: github. ...
show more
Blocked by UFW on MVI [2078/tcp] | SPT: 54400 | TTL: 47 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2026-06-02 23:00:00
(3 months ago)
SSH Brute-Force
DDoS Attack
Port Scan
Hacking
Brute-Force
SSH
2026-06-02 22:30:44
(3 months ago)
AS8075: 20.83.0.0/16 - Microsoft Corporation (US)
Port Scan
🇺🇸
TPI-Abuse
2026-06-02 21:55:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 20.83.159.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 20.83.159.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 17:55:17.133542 2026] [security2:error] [pid 1658:tid 1658] [client 20.83.159.8:54672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.237"] [uri "/.git/HEAD"] [unique_id "ah9RRaN7jz3D1z-bmU2z6wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
PeravixGroup
2026-06-02 20:31:50
(3 months ago)
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show more
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
🇺🇸
MPL
2026-06-02 19:10:52
(3 months ago)
tcp/2082 (2 or more attempts)
Port Scan
🇺🇸
TPI-Abuse
2026-06-02 19:02:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 20.83.159.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 20.83.159.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 15:02:12.986060 2026] [security2:error] [pid 28516:tid 28516] [client 20.83.159.8:53596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.96"] [uri "/.git/HEAD"] [unique_id "ah8otNfOo8xseLSAHEsuowAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-02 17:13:59
(3 months ago)
15 attempts against mh-modsecurity-ban on cmdb
Brute-Force
Web App Attack