🇳🇱
BIV
2026-06-10 14:08:46
(3 hours ago)
Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 1090,11740,1200,1217,1 ...
show more
Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 1090,11740,1200,1217,13722,1962,20000,2404,4000,4712,5413,55553,55565,802. Automated tiered (T-Pot+DShield).
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
🇵🇱
pshost.pl
2026-06-10 12:55:21
(4 hours ago)
2026-06-10T12:55:21.180Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more
2026-06-10T12:55:21.180Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 64.94.159.240.
show less
Port Scan
Brute-Force
SSH
🇹🇷
Threat.live
2026-06-10 09:25:04
(8 hours ago)
Suspicious Connection Attempts
Brute-Force
🇺🇸
cazae
2026-06-10 09:20:40
(8 hours ago)
Unauthorized attempt on debian [48898/tcp]
Source port: 41873
TTL: 242
Packet length: 40
TOS: 0x00
...
show more
Unauthorized attempt on debian [48898/tcp]
Source port: 41873
TTL: 242
Packet length: 40
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
ITSNF
2026-06-10 09:10:04
(8 hours ago)
Blocked by os-abuseipdb; 17 hits, proto=tcp, ports=1025,1089,18518,1883,19999,20000,20547,2222,2404, ...
show more
Blocked by os-abuseipdb; 17 hits, proto=tcp, ports=1025,1089,18518,1883,19999,20000,20547,2222,2404,4000,48898,
show less
Port Scan
Hacking
🇨🇿
lp
2026-06-10 04:35:38
(13 hours ago)
anomaly: tcp_port_scan, 501 > threshold 500, repeats 1155 times
Port Scan
🇫🇷
JPPO
2026-06-10 00:52:24
(16 hours ago)
Multiport scan 52 ports : 102 135 502 789 802 1025 1026 1089 1090 1091 1200 1217 1330 1331 1332 1883 ...
show more
Multiport scan 52 ports : 102 135 502 789 802 1025 1026 1089 1090 1091 1200 1217 1330 1331 1332 1883 1911 1962 2222 2404 2455 3671 4000 4241 4712 4840 4843 4911 5001 5006 5007 5094 5413 5450 8080 8443 8883 9600 10001 11740 12345 13722 18245 18246 18507 18508 18518 18519 18550 19999 20000 20547
show less
Port Scan
🇺🇸
cazae
2026-06-09 21:20:00
(20 hours ago)
Unauthorized attempt on debian [11740/tcp]
Source port: 58054
TTL: 242
Packet length: 40
TOS: 0x00
...
show more
Unauthorized attempt on debian [11740/tcp]
Source port: 58054
TTL: 242
Packet length: 40
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇮
6kilowatti
2026-06-09 18:34:15
(23 hours ago)
2026-06-09T21:34:15.038555+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ...
show more
2026-06-09T21:34:15.038555+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=64.94.159.240 DST=192.168.0.102 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=18904 PROTO=TCP SPT=50040 DPT=8883 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇬🇧
Andrew
2026-06-09 09:57:25
(1 day ago)
Blocked by UFW (TCP on port 3389).
Source port: 43662
TTL: 55
Packet length: 52
TOS: 0x00
This repo ...
show more
Blocked by UFW (TCP on port 3389).
Source port: 43662
TTL: 55
Packet length: 52
TOS: 0x00
This report (for 64.94.159.240) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
2026-06-09 09:57:14
(1 day ago)
Unauthorized access (tcp/3389/rdp)
Port Scan
🇫🇮
iamxorum
2026-06-09 09:55:42
(1 day ago)
2026-06-09T09:55:41.398009+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ...
show more
2026-06-09T09:55:41.398009+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=64.94.159.240 DST=46.62.222.43 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=9765 PROTO=TCP SPT=55162 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇧🇷
diego
2026-06-09 05:50:52
(1 day ago)
[rede-168-134] *Port Scan* detected from 64.94.159.240 (US/United States/-). 11 hits in the last 25 ...
show more
[rede-168-134] *Port Scan* detected from 64.94.159.240 (US/United States/-). 11 hits in the last 25 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Jun 9 02:50:36 kernel: Firewall: *TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=64.94.159.240 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=44197 PROTO=TCP SPT=44236 DPT=4840 WINDOW=1024 RES=0x00 SYN URGP=0
Jun 9 02:50:36 kernel: Firewall: *TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=64.94.159.240 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=3515 PROTO=TCP SPT=44236 DPT=1332 WINDOW=1024 RES=0x00 SYN URGP=0
J
show less
Port Scan
🇺🇸
cwytech
2026-06-09 03:03:38
(1 day ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/rdg-local-lockdown-high.
Bad Web Bot
Web App Attack
2026-06-09 03:01:33
(1 day ago)
Unauthorized access (tcp/80/http)
Port Scan
Web App Attack