🇦🇹
urnilxfgbez
2026-06-06 22:45:00
(1 week ago)
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇹🇭
Sawasdee
2026-06-06 04:48:14
(1 week ago)
Unwanted checking 80 or 443 port
...
Bad Web Bot
🇫🇷
Hiigara
2026-06-06 04:30:32
(1 week ago)
connection attempt : 74.235.133.213 on port : tcp/8080 (HTTP-alt)
Port Scan
🇩🇪
genokrad
2026-06-06 03:28:35
(1 week ago)
Direct ip access to website TCP 80/443, path "/.git/config" [Mozilla/5.0 (Windows NT 10.0; Win64; x6 ...
show more
Direct ip access to website TCP 80/443, path "/.git/config" [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH].
show less
Port Scan
Web App Attack
🇺🇸
TJTheSpy
2026-06-06 02:28:26
(1 week ago)
74.235.133.213 - - [06/Jun/2026:02:28:12 +0000] "GET /.git/HEAD HTTP/1.1" 404 2208 "-" "Mozilla/5.0 ...
show more
74.235.133.213 - - [06/Jun/2026:02:28:12 +0000] "GET /.git/HEAD HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
74.235.133.213 - - [06/Jun/2026:02:28:13 +0000] "GET /.git/config HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
74.235.133.213 - - [06/Jun/2026:02:28:15 +0000] "GET /.env HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
74.235.133.213 - - [06/Jun/2026:02:28:21 +0000] "GET /.env.production HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
74.235.133.213 - - [06/Jun/2026:02:28:25 +0000] "GET /.env.save HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
aks4226
2026-06-06 02:23:07
(1 week ago)
Bot search, attacking common web applications.
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 02:13:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.235.133.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.133.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 22:13:52.110842 2026] [security2:error] [pid 12271:tid 12271] [client 74.235.133.213:38852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.230"] [uri "/.git/HEAD"] [unique_id "aiOCYEafNmmqMP7BvUIt7QAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Smish
2026-06-06 01:20:10
(1 week ago)
HONEYPOT HIT --> Fail2ban time=1780708809 log=2026-06-06T02:20:09+01:00 ip=74.235.133.213 host=89.39 ...
show more
HONEYPOT HIT --> Fail2ban time=1780708809 log=2026-06-06T02:20:09+01:00 ip=74.235.133.213 host=89.39.211.7 method=GET uri="/.env" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" ref="-" rid=8d0cc0e6506166698356d07e73a7b8e7
show less
Web App Attack
🇷🇸
Scan
2026-06-06 00:29:51
(1 week ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇬🇧
PeravixGroup
2026-06-01 16:57:43
(1 week ago)
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ...
show more
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
🇺🇸
xmission.com
2026-06-01 14:37:34
(2 weeks ago)
Blocked by UFW (TCP on 8080)
Source port: 55336
TTL: 49
Packet length: 60
TOS: 0x00
This report (fo ...
show more
Blocked by UFW (TCP on 8080)
Source port: 55336
TTL: 49
Packet length: 60
TOS: 0x00
This report (for 74.235.133.213) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇺🇸
RAP
2026-06-01 14:00:21
(2 weeks ago)
2026-06-01 14:00:21 UTC Unauthorized activity to TCP port 8443. Web App
Port Scan
Web App Attack
🇬🇧
PeravixGroup
2026-06-01 13:06:18
(2 weeks ago)
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show more
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
🇩🇪
2048
2026-05-29 09:45:28
(2 weeks ago)
2026-05-29T11:45:25.687103+02:00 machodeer kernel: [2755843.236970] [UFW BLOCK] IN=ens3 OUT= MAC=RED ...
show more
2026-05-29T11:45:25.687103+02:00 machodeer kernel: [2755843.236970] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=74.235.133.213 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=11351 DF PROTO=TCP SPT=53288 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-05-29T11:45:26.708174+02:00 machodeer kernel: [2755844.258058] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=74.235.133.213 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=11352 DF PROTO=TCP SPT=53288 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-05-29T11:45:27.732266+02:00 machodeer kernel: [2755845.282112] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=74.235.133.213 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=11353 DF PROTO=TCP SPT=53288 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
show less
Port Scan