🇺🇸
TPI-Abuse
2026-06-07 03:39:36
(33 minutes ago)
(mod_security) mod_security (id:210492) triggered by 4.154.22.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 4.154.22.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 23:39:31.791125 2026] [security2:error] [pid 4407:tid 4407] [client 4.154.22.6:44749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.50"] [uri "/.git/HEAD"] [unique_id "aiTn87CgcluGO_ZQeRO7YAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
Scan
2026-06-07 02:42:18
(1 hour ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-06-07 02:35:03
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 4.154.22.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 4.154.22.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 22:34:59.037370 2026] [security2:error] [pid 32084:tid 32107] [client 4.154.22.6:44224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.128"] [uri "/.git/HEAD"] [unique_id "aiTY02UNIaGV1sjp1AKPQgAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
drewf.ink
2026-06-01 04:54:48
(5 days ago)
[04:54] Port scanning. Port(s) scanned: TCP/2087
Port Scan
🇬🇧
sonot
2026-06-01 02:32:47
(6 days ago)
Blocked by UFW on tunneluk01 [2082/tcp]
Source port: 43968
TTL: 107
Packet length: 40
TOS: 0x00
Thi ...
show more
Blocked by UFW on tunneluk01 [2082/tcp]
Source port: 43968
TTL: 107
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
ValtonTahiri
2026-06-01 02:10:23
(6 days ago)
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show more
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=4.154.22.6; proto=TCP; source_port=43968; target_port=2087; flags=SYN
show less
Port Scan
🇺🇸
drewf.ink
2026-06-01 01:43:24
(6 days ago)
[01:43] Port scanning. Port(s) scanned: TCP/2087
Port Scan
2026-06-01 00:47:43
(6 days ago)
2026-06-01T01:47:41.684934+01:00 vps kernel: [42015031.179923] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ...
show more
2026-06-01T01:47:41.684934+01:00 vps kernel: [42015031.179923] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=4.154.22.6 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=35 ID=46477 DF PROTO=TCP SPT=43968 DPT=2086 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
🇯🇵
jay hung
2026-05-09 06:13:07
(4 weeks ago)
2026-05-09T06:13:06.984774+00:00 quarktech kernel: [603036.954288] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ...
show more
2026-05-09T06:13:06.984774+00:00 quarktech kernel: [603036.954288] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=4.154.22.6 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP SPT=31792 DPT=443 WINDOW=0 RES=0x00 RST URGP=0
...
show less
Port Scan
🇯🇵
demonsword
2026-05-08 05:30:08
(4 weeks ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ipinfo.io:443
show less
Open Proxy
Port Scan
🇩🇪
2048
2026-04-25 19:03:36
(1 month ago)
2026-04-25T21:03:32.669495+02:00 machodeer kernel: [86093.589647] [UFW BLOCK] IN=ens3 OUT= MAC=REDAC ...
show more
2026-04-25T21:03:32.669495+02:00 machodeer kernel: [86093.589647] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=4.154.22.6 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=21636 DF PROTO=TCP SPT=36108 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-04-25T21:03:33.729368+02:00 machodeer kernel: [86094.649418] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=4.154.22.6 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=21637 DF PROTO=TCP SPT=36108 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-04-25T21:03:34.753441+02:00 machodeer kernel: [86095.673775] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=4.154.22.6 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=21638 DF PROTO=TCP SPT=36108 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
show less
Port Scan
🇨🇭
Elysium Security
2026-04-25 08:32:00
(1 month ago)
Mass port scanning on a whole network
Port Scan
🇺🇸
Rayulcifer
2026-03-31 16:32:54
(2 months ago)
4.154.22.6 - - [31/Mar/2026:11:32:44 -0500] "CONNECT www.itemsatis.com:443:443 HTTP/1.1" 400 392 "-" ...
show more
4.154.22.6 - - [31/Mar/2026:11:32:44 -0500] "CONNECT www.itemsatis.com:443:443 HTTP/1.1" 400 392 "-" "-"
4.154.22.6 - - [31/Mar/2026:11:32:52 -0500] "CONNECT www.itemsatis.com:443:443 HTTP/1.1" 400 392 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
🇩🇪
bontekoe.technology
2026-03-15 01:04:25
(2 months ago)
Port scan or Brute-Force detected. (src_port=46080, dst_port=443)
Brute-Force