🇩🇪
VentryShield
2026-07-27 00:44:12
(1 month ago)
p0t honeypot: https connection on port 443/tcp, 278 bytes received from client
Web App Attack
Bad Web Bot
🇷🇸
Scan
2026-07-27 00:31:48
(1 month ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
thororen
2026-07-27 00:14:01
(1 month ago)
Blocked by UFW [2078/tcp]
Source port: 36639
TTL: 45
Packet length: 60
TOS: 0x00
This report was ge ...
show more
Blocked by UFW [2078/tcp]
Source port: 36639
TTL: 45
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇧🇾
lns.bz
2026-07-27 00:07:21
(1 month ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
rellim.com
2026-07-26 23:18:18
(1 month ago)
Jul 26 16:18:17 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ...
show more
Jul 26 16:18:17 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.165.251.244 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=965 DF PROTO=TCP SPT=35207 DPT=2078 WINDOW=64240 RES=0x00 SYN URGP=0
Jul 26 16:18:17 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.165.251.244 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=42395 DF PROTO=TCP SPT=36459 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0
Jul 26 16:18:17 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.165.251.244 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=20900 DF PROTO=TCP SPT=35247 DPT=2096 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇨🇦
alexbfr
2026-07-26 22:30:07
(1 month ago)
Fail2Ban report from nginx-bot-trap; automated HTTP honeypot detection.
Port Scan
2026-07-26 22:26:42
(1 month ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 22:26:02
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 52.165.251.244 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 52.165.251.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 18:25:56.888887 2026] [security2:error] [pid 30731:tid 30731] [client 52.165.251.244:35504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.107"] [uri "/.git/HEAD"] [unique_id "amaJdAKb2UY_zAGJPlqD5gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Mario Bretscher
2026-07-26 21:58:41
(1 month ago)
[Sun Jul 26 23:58:34.503003 2026] [php:error] [pid 2059723] [client 52.165.251.244:34958] script '/v ...
show more
[Sun Jul 26 23:58:34.503003 2026] [php:error] [pid 2059723] [client 52.165.251.244:34958] script '/var/www/html/wp-config.php' not found or unable to stat
[Sun Jul 26 23:58:38.646626 2026] [php:error] [pid 2059729] [client 52.165.251.244:34887] script '/var/www/html/info.php' not found or unable to stat
[Sun Jul 26 23:58:40.175493 2026] [php:error] [pid 2059722] [client 52.165.251.244:34880] script '/var/www/html/config.php' not found or unable to stat
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 20:42:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 52.165.251.244 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 52.165.251.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 16:42:23.785735 2026] [security2:error] [pid 3082411:tid 3082411] [client 52.165.251.244:47831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.29"] [uri "/.git/refs/heads/master"] [unique_id "amUfr0lLN9e_S_PGBbeEGAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-07-25 18:34:33
(1 month ago)
tcp/2078
Port Scan
🇺🇸
MPL
2026-07-25 09:59:31
(1 month ago)
tcp ports: 2077,2078 (2 or more attempts)
Port Scan
🇺🇸
Axel
2026-07-25 08:30:26
(1 month ago)
Blocked by UFW on LAXHH [80/tcp] | SPT: 14384 | TTL: 112 | LEN: 40 | TOS: 0x00 • Reported by: github ...
show more
Blocked by UFW on LAXHH [80/tcp] | SPT: 14384 | TTL: 112 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2026-07-25 06:48:46
(1 month ago)
denied traffic to a non-approved destination port. destination port 2078.
Port Scan
2026-06-25 20:20:11
(2 months ago)
Aggressive web scan
Web App Attack