🇵🇱
Wepted
2026-09-02 03:23:15
(3 hours ago)
Port scan detected by honeypot
Port Scan
Hacking
🇺🇸
RAP
2026-09-02 02:40:38
(4 hours ago)
2026-09-02 02:40:38 UTC Unauthorized activity to TCP port 8443. Web App
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 02:21:06
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 68.154.54.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 68.154.54.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:20:58.499189 2026] [security2:error] [pid 12195:tid 12195] [client 68.154.54.37:25308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.138"] [uri "/.git/config"] [unique_id "apeICptsDljzXd8nRc1WyAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
cazae
2026-09-02 01:37:58
(5 hours ago)
Unauthorized attempt on debian [2095/tcp]
Source port: 24908
TTL: 44
Packet length: 60
TOS: 0x00
ht ...
show more
Unauthorized attempt on debian [2095/tcp]
Source port: 24908
TTL: 44
Packet length: 60
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2026-09-02 01:19:55
(5 hours ago)
Blocked by UFW (TCP on 80)
Source port: 24838
TTL: 113
Packet length: 40
TOS: 0x00
This report (for ...
show more
Blocked by UFW (TCP on 80)
Source port: 24838
TTL: 113
Packet length: 40
TOS: 0x00
This report (for 68.154.54.37) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇫🇮
6kilowatti
2026-09-02 01:16:52
(5 hours ago)
2026-09-02T04:16:51.541613+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ...
show more
2026-09-02T04:16:51.541613+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=68.154.54.37 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=22997 DF PROTO=TCP SPT=23877 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇷🇸
Scan
2026-09-02 01:05:15
(5 hours ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
2026-09-02 00:49:31
(6 hours ago)
denied traffic to a non-approved destination port. destination port 2087.
Port Scan
🇳🇱
wlt-blocker
2026-09-02 00:15:26
(6 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇵🇹
Subnet Shadow Specter
2026-07-21 20:57:56
(1 month ago)
[Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP automati ...
show more
[Activity Alert] Abusive automated scraping detected in violation of crawl depth limits. IP automatically blocked and banned. [User-Agent]: python-httpx/0.28.1. [OS]: Unknown. [IP Address]: 68.154.54.37. [IoA Datetime]: 2026-07-21 21:38:38 UTC +1.
show less
Bad Web Bot
Hacking
Port Scan
Web App Attack
2026-06-03 08:00:00
(2 months ago)
SSH Brute-Force
DDoS Attack
Port Scan
Hacking
Brute-Force
SSH
2026-06-03 04:28:27
(2 months ago)
Drop from IP address 68.154.54.37 to tcp-port 2082
Port Scan
🇺🇸
TPI-Abuse
2026-06-03 04:13:41
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 68.154.54.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 68.154.54.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:13:37.030615 2026] [security2:error] [pid 4791:tid 4791] [client 68.154.54.37:17566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.15"] [uri "/.git/config"] [unique_id "ah-p8XZ3glK7LzhlhXsmOAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-03 02:56:26
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2026-06-03 02:11:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 68.154.54.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 68.154.54.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:11:18.361587 2026] [security2:error] [pid 29262:tid 29262] [client 68.154.54.37:17505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.89"] [uri "/.git/HEAD"] [unique_id "ah-NRlFGaonnnhUKxS40lgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack