🇫🇷
Petre 21_ip
2026-09-07 22:33:20
(14 hours ago)
2026-09-08T00:33:20.431407+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ...
show more
2026-09-08T00:33:20.431407+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=51.75.249.51 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=27284 DF PROTO=TCP SPT=59864 DPT=2087 WINDOW=29200 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-07 12:36:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 51.75.249.51 (vps-e843e759.vps.ovh.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 51.75.249.51 (vps-e843e759.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 08:36:46.192031 2026] [security2:error] [pid 1792514:tid 1792514] [client 51.75.249.51:33666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.183"] [uri "/.env"] [unique_id "ap6v3nD57Sob4jDkTqcR-gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RAP
2026-09-07 06:49:29
(1 day ago)
2026-09-07 06:49:29 UTC Unauthorized activity to TCP port 8443. Web App
Port Scan
Web App Attack
🇸🇪
SkyDancer
2026-09-07 03:31:57
(1 day ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇷🇸
Scan
2026-09-07 02:30:49
(1 day ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-09-06 02:38:41
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 51.75.249.51 (vps-e843e759.vps.ovh.net): 1 in t ...
show more
(mod_security) mod_security (id:210730) triggered by 51.75.249.51 (vps-e843e759.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:38:34.524603 2026] [security2:error] [pid 26898:tid 26898] [client 51.75.249.51:52518] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||192.64.150.89|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.89"] [uri "/database.sql"] [unique_id "apzSKv1CIL4hyjr5y_1pUAAAAGc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
Scan
2026-09-06 02:15:50
(2 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇮🇹
abuseiphack
2026-09-05 19:39:36
(2 days ago)
Automatic report for brute force attack
Web App Attack
🇩🇪
psauxit
2026-09-05 05:34:29
(3 days ago)
Fail2Ban - UFW port probing on unauthorized port
Port Scan
🇷🇸
Scan
2026-09-05 00:29:42
(3 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇬🇧
pearbright
2026-09-03 21:13:33
(4 days ago)
2026-09-03T21:08:37.341970+00:00 srv740043 kernel: [9207291.994105] [UFW BLOCK] IN=eth0 OUT= MAC=bc: ...
show more
2026-09-03T21:08:37.341970+00:00 srv740043 kernel: [9207291.994105] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=51.75.249.51 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=58373 DF PROTO=TCP SPT=44260 DPT=2087 WINDOW=29200 RES=0x00 SYN URGP=0
2026-09-03T21:08:37.371571+00:00 srv740043 kernel: [9207292.026683] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=51.75.249.51 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=189 DF PROTO=TCP SPT=56038 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
2026-09-03T21:08:37.371713+00:00 srv740043 kernel: [9207292.026775] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=51.75.249.51 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=35099 DF PROTO=TCP SPT=45290 DPT=2082 WINDOW=29200 RES=0x00 SYN URGP=0
2026-09-03T21:08:37.371734+00:00 srv740043 kernel: [9207292.026867] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=51.75.249.51
...
show less
Port Scan
2026-09-02 01:16:43
(6 days ago)
51.75.249.51 - - [02/Sep/2026:01:16:37 +0000] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 ( ...
show more
51.75.249.51 - - [02/Sep/2026:01:16:37 +0000] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
51.75.249.51 - - [02/Sep/2026:01:16:43 +0000] "GET /.git/refs/heads/master HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 18:03:38
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 51.75.249.51 (vps-e843e759.vps.ovh.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 51.75.249.51 (vps-e843e759.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 14:03:31.457245 2026] [security2:error] [pid 4911:tid 4911] [client 51.75.249.51:58934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.70"] [uri "/.env"] [unique_id "apcTc3EnXYy8ZfX8j-BzTAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
SeczarSecureOps
2026-09-01 17:57:46
(6 days ago)
Seczar SecureOps — Port Scan Detection (12 events) — quarantined 43200m on Skyart-FW
Port Scan
🇷🇸
Scan
2026-09-01 10:27:27
(1 week ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
