๐ฉ๐ช
HoneyPot-FrPri
2026-06-08 09:34:36
UTC ยท
(5 months ago)
31.57.28.85 - - [08/Jun/2026:11:34:36 +0200] "x16x03x01x05xF7x01x00x05xF3x03x03x1Ax9A6lxF8x86o-xBCxC0f" 400 157 "-" "-"
...
Bad Web Bot
Web App Attack
๐ฉ๐ช
celestialcity
2026-06-08 09:32:34
UTC ยท
(5 months ago)
Blocked by UFW on celestialcityeu [8443/tcp] | SPT: 51144 | TTL: 248 | LEN: 40 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐ฉ๐ช
gnb
2026-06-08 08:20:39
UTC ยท
(5 months ago)
2026-06-08T10:06:03.877545+02:00 atlas kernel: [46744615.377108] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=31.57.28.85 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=26009 PROTO=TCP SPT=42146 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-0 ...
show more
2026-06-08T10:06:03.877545+02:00 atlas kernel: [46744615.377108] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=31.57.28.85 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=26009 PROTO=TCP SPT=42146 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-08T10:16:32.329789+02:00 atlas kernel: [46745243.828381] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=31.57.28.85 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=4161 PROTO=TCP SPT=42146 DPT=2096 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-08T10:20:38.435834+02:00 atlas kernel: [46745489.934014] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=31.57.28.85 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=61370 PROTO=TCP SPT=42146 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐ฉ๐ช
gnb
2026-06-08 07:47:16
UTC ยท
(5 months ago)
2026-06-08T09:39:59.627605+02:00 atlas kernel: [46743051.129609] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=31.57.28.85 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=8280 PROTO=TCP SPT=42146 DPT=2087 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-08 ...
show more
2026-06-08T09:39:59.627605+02:00 atlas kernel: [46743051.129609] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=31.57.28.85 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=8280 PROTO=TCP SPT=42146 DPT=2087 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-08T09:40:14.646381+02:00 atlas kernel: [46743066.144457] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=31.57.28.85 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=8280 PROTO=TCP SPT=42146 DPT=2087 WINDOW=1024 RES=0x00 SYN URGP=0
2026-06-08T09:47:15.765849+02:00 atlas kernel: [46743487.267231] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=31.57.28.85 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=40983 PROTO=TCP SPT=42146 DPT=2083 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
Anonymous
2026-06-08 03:52:06
UTC ยท
(5 months ago)
Reported from Nginx log analysis 6. Log: 31.57.28.85 - - [08/Jun/2026:xx:xx:xx 0200] "GET /en?ed=2560 HTTP/1.1" xxx xxx "-" "Mozilla/5.0" "-" "LV Latvia Riga" "AS56971" "Cgi Global Limited"
Port Scan
Brute-Force
SSH
๐ฌ๐ง
andypiper
2026-06-08 01:01:32
UTC ยท
(5 months ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ฌ๐ง
knock
2026-06-08 00:24:31
UTC ยท
(5 months ago)
Knock-Knock honeypot brute-force: proto8 (6 total hits)
Brute-Force
๐ฉ๐ช
HoneyPotFRI
2026-06-08 00:03:59
UTC ยท
(5 months ago)
31.57.28.85 - - [08/Jun/2026:02:03:43 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
31.57.28.85 mcde.b-cdn.net (2914-NTT-DATA-2914 United Arab Emirates -) - - [08/Jun/2026:02:03:43 +0200
...
Bad Web Bot
Web App Attack
๐ช๐ธ
Francisco Vallejo
2026-06-07 23:53:09
UTC ยท
(5 months ago)
[Mon Jun 08 01:06:55.549168 2026] [core:info] [pid 2087011:tid 130566913509056] [client 31.57.28.85:52244] AH00128: File does not exist: /var/www/franvallejo/en
[Mon Jun 08 01:06:58.555698 2026] [core:info] [pid 2087011:tid 130566896723648] [client 3 ...
show more
[Mon Jun 08 01:06:55.549168 2026] [core:info] [pid 2087011:tid 130566913509056] [client 31.57.28.85:52244] AH00128: File does not exist: /var/www/franvallejo/en
[Mon Jun 08 01:06:58.555698 2026] [core:info] [pid 2087011:tid 130566896723648] [client 31.57.28.85:52256] AH00128: File does not exist: /var/www/franvallejo/en
[Mon Jun 08 01:39:20.313446 2026] [core:info] [pid 2087011:tid 130567435699904] [client 31.57.28.85:38340] AH00128: File does not exist: /var/www/franvallejo/en
[Mon Jun 08 01:39:24.379204 2026] [core:info] [pid 2087012:tid 130565973984960] [client 31.57.28.85:38348] AH00128: File does not exist: /var/www/franvallejo/en
[Mon Jun 08 01:53:08.836545 2026] [core:info] [pid 2087011:tid 130566888330944] [client 31.57.28.85:43002] AH00128: File does not exist: /var/www/franvallejo/en
...
show less
Brute-Force
SSH
๐ฏ๐ต
www.winos.me
2026-06-07 23:38:01
UTC ยท
(5 months ago)
Shield: Layer4 Port 9 Trap
Port Scan
Hacking
Anonymous
2026-06-07 23:17:25
UTC ยท
(5 months ago)
[Mon Jun 08 01:11:03.711142 2026] [authz_core:error] [pid 29889] [client 31.57.28.85:56848] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jun 08 01:11:06.775140 2026] [authz_core:error] [pid 26973] [client 31.57.28.85:56852] ...
show more
[Mon Jun 08 01:11:03.711142 2026] [authz_core:error] [pid 29889] [client 31.57.28.85:56848] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jun 08 01:11:06.775140 2026] [authz_core:error] [pid 26973] [client 31.57.28.85:56852] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jun 08 01:17:24.299118 2026] [authz_core:error] [pid 30863] [client 31.57.28.85:58402] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฉ๐ช
HoneyPotFRI
2026-06-07 22:58:58
UTC ยท
(5 months ago)
31.57.28.85 - - [08/Jun/2026:00:58:42 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
31.57.28.85 d21bqogpwwn1sv.cloudfront.net (2914-NTT-DATA-2914 United Arab Emirates -) - - [08/Jun/2026
...
Bad Web Bot
Web App Attack
๐ต๐ฑ
mkey
2026-06-07 22:05:07
UTC ยท
(5 months ago)
Source IP from blacklist is still actively scanning our network. (8 hits in last hour, last seen 2026-06-07 23:57:42)
Port Scan
๐ฉ๐ช
mueller-nils.com
2026-06-07 21:37:15
UTC ยท
(5 months ago)
Jun 7 23:15:42 [host] kernel: [3975726.427436] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=31.57.28.85 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=20350 PROTO=TCP SPT=46500 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 7 23:15:50 [host] kernel: [3975734
Port Scan
๐ฉ๐ช
mr.joecat
2026-06-07 18:30:54
UTC ยท
(5 months ago)
31.57.28.85 - - [07/Jun/2026:20:30:49 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
31.57.28.85 - - [07/Jun/2026:20:30:50 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
31.57.28.85 - - [07/Jun/2026:20:30:51 +0200] "GET /en? ...
show more
31.57.28.85 - - [07/Jun/2026:20:30:49 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
31.57.28.85 - - [07/Jun/2026:20:30:50 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
31.57.28.85 - - [07/Jun/2026:20:30:51 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
31.57.28.85 - - [07/Jun/2026:20:30:52 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
31.57.28.85 - - [07/Jun/2026:20:30:53 +0200] "GET /en?ed=2560 HTTP/1.1" 404 153 "-" "Mozilla/5.0"
...
show less
Web App Attack