🇦🇹
urnilxfgbez
2026-06-03 22:45:00
(17 hours ago)
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸
TPI-Abuse
2026-06-03 03:06:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.236.141.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.236.141.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 23:06:10.278886 2026] [security2:error] [pid 2142:tid 2142] [client 64.236.141.182:4166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.42"] [uri "/.git/HEAD"] [unique_id "ah-aIiGPgbDF-tzICLDtiAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Not Fake
2026-06-03 02:52:43
(1 day ago)
$f2bV_matches
Web App Attack
🇺🇸
MPL
2026-06-03 02:26:38
(1 day ago)
tcp port scan (16 or more attempts)
Port Scan
🇮🇩
sockominfo
2026-06-03 02:00:43
(1 day ago)
Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: ...
show more
Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇩🇪
guldkage
2026-06-03 01:08:01
(1 day ago)
Unauthorized connection attempt detected from IP address 64.236.141.182 to port 8443 (ger-03) [W]
Brute-Force
Exploited Host
🇮🇩
sockominfo
2026-06-03 01:00:41
(1 day ago)
Access to sensitive files detected w/ specific boundary.. Threat Score: 5.2/10 (MEDIUM). Confidence: ...
show more
Access to sensitive files detected w/ specific boundary.. Threat Score: 5.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇷🇸
Scan
2026-06-03 00:28:44
(1 day ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇳🇵
radheykrishna.com.np
2026-06-02 23:25:10
(1 day ago)
Jun 3 05:10:09 kernel: [3932512.654147] [UFW BLOCK] IN=ens160 OUT= SRC=64.236.141.182 LEN=60 TOS=0x ...
show more
Jun 3 05:10:09 kernel: [3932512.654147] [UFW BLOCK] IN=ens160 OUT= SRC=64.236.141.182 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=53147 DF PROTO=TCP SPT=4808 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-02 23:06:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.236.141.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.236.141.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 19:06:42.089901 2026] [security2:error] [pid 7227:tid 7227] [client 64.236.141.182:4796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.87"] [uri "/.git/HEAD"] [unique_id "ah9iAjBjarrvi3yYNGQmAgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CBJ
2026-06-02 23:05:41
(1 day ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇬🇧
PeravixGroup
2026-06-02 22:45:09
(1 day ago)
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show more
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
🇺🇸
xmission.com
2026-06-02 00:39:10
(2 days ago)
Blocked by UFW (TCP on 2087)
Source port: 16521
TTL: 51
Packet length: 60
TOS: 0x00
This report (fo ...
show more
Blocked by UFW (TCP on 2087)
Source port: 16521
TTL: 51
Packet length: 60
TOS: 0x00
This report (for 64.236.141.182) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇷🇸
Scan
2026-06-02 00:05:42
(2 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇩🇪
Justin F. | AS204464
2026-06-01 23:05:11
(2 days ago)
Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2087 [1], 2086 [1] TCP
Reported ...
show more
Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2087 [1], 2086 [1] TCP
Reported by: Justin F.
show less
Port Scan