๐ซ๐ท
2a02:c207::2
29 Dec 2025
Dec 29 19:32:02 *hidden* kernel: [ 3105.620490] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:3e:4a:cc:0 ...
show more
Dec 29 19:32:02 *hidden* kernel: [ 3105.620490] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:3e:4a:cc:00:dc:00:00:00:02:86:dd SRC=2a02:c207:0000:0000:0000:0000:0000:0002 DST=2a02:c207:2031:6131:0250:56ff:fe3e:4acc LEN=72 TC=0 HOPLIMIT=254 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 Dec 29 19:32:03 *hidden* kernel: [ 3106.719813] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:3e:4a:cc:00:dc:00:00:00:02:86:dd SRC=2a02:c207:0000:0000:0000:0000:0000:0002 DST=2a02:c207:2031:6131:0250:56ff:fe3e:4acc LEN=72 TC=0 HOPLIMIT=254 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 Dec 29 19:32:04 *hidden* kernel: [ 3107.819863] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:3e:4a:cc:00:dc:00:00:00:02:86:dd SRC=2a02:c207:0000:0000:0000:0000:0000:0002 DST=2a02:c207:2031:6131:0250:56ff:fe3e:4acc LEN=72 TC=0 HOPLIMIT=254 FLOWLBL=0 PROTO=ICMPv6 TYPE=135 CODE=0 Dec 29 19:38:09 *hidden* kernel: [ 3473.021430] [UFW BLOCK] IN=eth0 OUT=eth0 MAC=00:50:56:3e:4a:cc:00:dc:00:00:00:02:86:dd SRC=2a02:c207:0000:0000:0000:0000:0000:0002 DST=2a02
...
show less
Port Scan
Hacking
๐จ๐ฆ
143.198.43.208
29 Dec 2025
143.198.43.208 - - [28/Dec/2025:19:49:36 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydr ...
show more
143.198.43.208 - - [28/Dec/2025:19:49:36 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 143.198.43.208 - - [28/Dec/2025:19:49:36 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);"
show less
Port Scan
Bad Web Bot
Web App Attack
๐ฉ๐ช
209.38.213.105
29 Dec 2025
Dec 29 17:44:55 *hidden* kernel: [1958154.924512] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 17:44:55 *hidden* kernel: [1958154.924512] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=209.38.213.105 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=12891 PROTO=TCP SPT=46638 DPT=3909 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 17:59:53 *hidden* kernel: [1959053.595469] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=209.38.213.105 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=23463 PROTO=TCP SPT=46622 DPT=3980 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 18:11:25 *hidden* kernel: [1959744.980410] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=209.38.213.105 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=37406 PROTO=TCP SPT=46638 DPT=3068 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 18:21:56 *hidden* kernel: [1960375.746482] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=209.38.213.105 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=25967 PROTO=TCP
...
show less
Port Scan
Hacking
๐บ๐ธ
216.180.246.102
29 Dec 2025
Dec 29 18:02:26 *hidden* kernel: [1959205.941854] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 18:02:26 *hidden* kernel: [1959205.941854] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.102 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=50420 PROTO=TCP SPT=21703 DPT=8003 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 18:13:21 *hidden* kernel: [1959861.463820] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.102 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x60 TTL=58 ID=21160 PROTO=TCP SPT=21703 DPT=8545 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 18:18:27 *hidden* kernel: [1960166.786761] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.102 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=36266 PROTO=TCP SPT=21703 DPT=16993 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 18:20:22 *hidden* kernel: [1960281.547796] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.102 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=45735 PROTO=TC
...
show less
Port Scan
Hacking
๐ณ๐ฑ
45.144.212.58
29 Dec 2025
45.144.212.58 - - [29/Dec/2025:18:19:45 +0100] "GET /.git/config HTTP/1.1" 400 154 "-" "Mozilla/5.0 ...
show more
45.144.212.58 - - [29/Dec/2025:18:19:45 +0100] "GET /.git/config HTTP/1.1" 400 154 "-" "Mozilla/5.0 (Linux; Android 9; RMX1805) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36" 45.144.212.58 - - [29/Dec/2025:18:20:59 +0100] "GET /.git/config HTTP/1.1" 403 2528 "-" "Mozilla/5.0 (SymbianOS/9.4; Series60/5.0 NokiaN97-1/10.0.012; Profile/MIDP-2.1 Configuration/CLDC-1.1; en-us) AppleWebKit/525 (KHTML, like Gecko) WicKed/7.1.12344"
show less
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
104.156.155.9
29 Dec 2025
Dec 29 17:15:10 *hidden* kernel: [1956369.882342] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 17:15:10 *hidden* kernel: [1956369.882342] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=26019 PROTO=TCP SPT=56884 DPT=8028 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 17:17:58 *hidden* kernel: [1956537.702160] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=56550 PROTO=TCP SPT=56884 DPT=1355 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 17:19:55 *hidden* kernel: [1956655.568150] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=14705 PROTO=TCP SPT=56884 DPT=4333 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 17:21:29 *hidden* kernel: [1956748.847408] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=14956 PROTO=TCP SPT
...
show less
Port Scan
Hacking
๐บ๐ธ
162.243.52.78
29 Dec 2025
162.243.52.78 - - [29/Dec/2025:17:04:45 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydro ...
show more
162.243.52.78 - - [29/Dec/2025:17:04:45 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 162.243.52.78 - - [29/Dec/2025:17:04:45 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);"
show less
Port Scan
Bad Web Bot
Web App Attack
๐ฎ๐ณ
135.235.161.115
29 Dec 2025
135.235.161.115 - - [29/Dec/2025:16:45:59 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 302 138 "https ...
show more
135.235.161.115 - - [29/Dec/2025:16:45:59 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 302 138 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 135.235.161.115 - - [29/Dec/2025:16:46:03 +0100] "GET /help.php HTTP/1.1" 302 138 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
show less
Port Scan
Bad Web Bot
Web App Attack
๐ฐ๐ท
20.196.91.209
29 Dec 2025
20.196.91.209 - - [29/Dec/2025:16:25:16 +0100] "GET /wp-includes/js/tinymce/plugins/colorpicker/wp-l ...
show more
20.196.91.209 - - [29/Dec/2025:16:25:16 +0100] "GET /wp-includes/js/tinymce/plugins/colorpicker/wp-login.php HTTP/1.1" 302 138 "-" "-" 20.196.91.209 - - [29/Dec/2025:16:25:22 +0100] "GET /test.php HTTP/1.1" 302 138 "-" "-"
show less
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
216.180.246.250
29 Dec 2025
Dec 29 16:07:27 *hidden* kernel: [1952307.070254] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 16:07:27 *hidden* kernel: [1952307.070254] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.250 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=16102 PROTO=TCP SPT=21952 DPT=554 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 16:09:44 *hidden* kernel: [1952444.126754] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.250 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=12033 PROTO=TCP SPT=21952 DPT=9056 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 16:11:39 *hidden* kernel: [1952559.139766] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.250 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x60 TTL=58 ID=7824 PROTO=TCP SPT=21952 DPT=9402 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 16:15:49 *hidden* kernel: [1952809.454485] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.250 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=38952 PROTO=TCP S
...
show less
Port Scan
Hacking
๐บ๐ธ
104.156.155.9
29 Dec 2025
Dec 29 16:10:27 *hidden* kernel: [1952486.678836] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 16:10:27 *hidden* kernel: [1952486.678836] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=31113 PROTO=TCP SPT=56884 DPT=3550 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 16:10:31 *hidden* kernel: [1952490.960295] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=13580 PROTO=TCP SPT=56884 DPT=9761 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 16:11:20 *hidden* kernel: [1952539.632239] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=17286 PROTO=TCP SPT=56884 DPT=8291 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 16:12:05 *hidden* kernel: [1952584.766687] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=60450 PROTO=TCP SPT
...
show less
Port Scan
Hacking
๐ณ๐ฑ
185.242.226.61
29 Dec 2025
Dec 29 15:33:31 *hidden* kernel: [1950270.654040] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 15:33:31 *hidden* kernel: [1950270.654040] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=185.242.226.61 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=TCP SPT=50801 DPT=40443 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 29 15:46:34 *hidden* kernel: [1951054.202704] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=185.242.226.61 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=TCP SPT=45071 DPT=40776 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 29 15:54:00 *hidden* kernel: [1951499.645885] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=185.242.226.61 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=TCP SPT=44783 DPT=40814 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 29 16:09:14 *hidden* kernel: [1952414.305192] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=185.242.226.61 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PRO
...
show less
Port Scan
Hacking
๐บ๐ธ
104.156.155.9
29 Dec 2025
Dec 29 15:04:10 *hidden* kernel: [1948510.360834] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 15:04:10 *hidden* kernel: [1948510.360834] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=2950 PROTO=TCP SPT=56884 DPT=6668 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 15:04:29 *hidden* kernel: [1948528.754527] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=3535 PROTO=TCP SPT=56884 DPT=3072 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 15:05:48 *hidden* kernel: [1948608.177152] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=536 PROTO=TCP SPT=56884 DPT=8649 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 15:08:34 *hidden* kernel: [1948773.670226] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=104.156.155.9 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=58803 PROTO=TCP SPT=568
...
show less
Port Scan
Hacking
๐บ๐ธ
193.26.115.110
29 Dec 2025
193.26.115.110 - - [29/Dec/2025:14:50:17 +0100] "GET /.env HTTP/1.1" 302 138 "-" "Mozilla/5.0 (X11; ...
show more
193.26.115.110 - - [29/Dec/2025:14:50:17 +0100] "GET /.env HTTP/1.1" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.26.115.110 - - [29/Dec/2025:14:50:17 +0100] "GET /.env HTTP/1.1" 302 138 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
show less
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
45.156.129.161
29 Dec 2025
45.156.129.161 - - [29/Dec/2025:14:32:38 +0100] "GET /license.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 ...
show more
45.156.129.161 - - [29/Dec/2025:14:32:38 +0100] "GET /license.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.161 - - [29/Dec/2025:14:32:39 +0100] "GET /license.txt HTTP/1.1" 404 878 "http://mail.tuxlinux.eu/license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
show less
Port Scan
Bad Web Bot
Web App Attack
๐จ๐ณ
111.26.87.55
29 Dec 2025
Dec 29 14:23:33 *hidden* kernel: [1946073.443930] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 14:23:33 *hidden* kernel: [1946073.443930] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=111.26.87.55 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=5864 PROTO=TCP SPT=54604 DPT=2038 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 14:23:53 *hidden* kernel: [1946093.201127] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=111.26.87.55 DST=173.212.244.83 LEN=40 TOS=0x14 PREC=0x60 TTL=237 ID=31161 PROTO=TCP SPT=54604 DPT=2016 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 14:25:16 *hidden* kernel: [1946175.835375] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=111.26.87.55 DST=173.212.244.83 LEN=40 TOS=0x14 PREC=0x60 TTL=237 ID=6653 PROTO=TCP SPT=54604 DPT=2185 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 14:26:21 *hidden* kernel: [1946241.203395] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=111.26.87.55 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=1867 PROTO=TCP SPT=54604
...
show less
Port Scan
Hacking
๐บ๐ธ
216.180.246.17
29 Dec 2025
Dec 29 14:04:48 *hidden* kernel: [1944948.527834] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 14:04:48 *hidden* kernel: [1944948.527834] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.17 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=55437 PROTO=TCP SPT=21909 DPT=7546 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 14:06:31 *hidden* kernel: [1945051.088201] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.17 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=2127 PROTO=TCP SPT=21909 DPT=40202 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 14:10:00 *hidden* kernel: [1945259.659753] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.17 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=61163 PROTO=TCP SPT=21909 DPT=2351 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 14:11:51 *hidden* kernel: [1945371.332073] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.17 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=18079 PROTO=TCP SPT
...
show less
Port Scan
Hacking
๐ฐ๐ท
4.218.10.83
29 Dec 2025
4.218.10.83 - - [29/Dec/2025:13:26:20 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HT ...
show more
4.218.10.83 - - [29/Dec/2025:13:26:20 +0100] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 302 138 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 4.218.10.83 - - [29/Dec/2025:13:26:33 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 302 138 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
show less
Port Scan
Bad Web Bot
Web App Attack
๐ณ๐ฑ
45.82.13.170
29 Dec 2025
45.82.13.170 - - [29/Dec/2025:12:50:30 +0100] "GET /.env HTTP/1.1" 400 154 "-" "Mozilla/5.0 (Windows ...
show more
45.82.13.170 - - [29/Dec/2025:12:50:30 +0100] "GET /.env HTTP/1.1" 400 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.119 Safari/537.36" 45.82.13.170 - - [29/Dec/2025:12:51:18 +0100] "GET /.env HTTP/1.1" 403 2525 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36"
show less
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
216.180.246.58
29 Dec 2025
Dec 29 12:02:05 *hidden* kernel: [1937585.514593] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 12:02:05 *hidden* kernel: [1937585.514593] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.58 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=32176 PROTO=TCP SPT=21780 DPT=9981 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 12:09:47 *hidden* kernel: [1938046.734347] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.58 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=14943 PROTO=TCP SPT=21780 DPT=16667 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 12:15:18 *hidden* kernel: [1938377.729645] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.58 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=26864 PROTO=TCP SPT=21780 DPT=7596 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 29 12:15:49 *hidden* kernel: [1938408.766783] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.58 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=49882 PROTO=TCP SP
...
show less
Port Scan
Hacking
๐ฉ๐ช
107.150.117.219
29 Dec 2025
Dec 29 12:04:18 *hidden* postfix/submission/smtpd[13740]: improper command pipelining after CONNECT ...
show more
Dec 29 12:04:18 *hidden* postfix/submission/smtpd[13740]: improper command pipelining after CONNECT from unknown[107.150.117.219]: \026\003\001\000\374\001\000\000\370\003\003\204\372:\3257\313]\213\021@=\a\030{e\221r]\205\252X\266\000\237\367\312Zu0\235\225\237 P"A\t\177\026\017\215\233K76\025-\317X\322TT\005D\002eSc&4J3\r\352\231\0004\314\250\314\251\300/\3000\300+\300,\300\t\000\236\314\250\314\252\0003 Dec 29 12:04:36 *hidden* postfix/submission/smtpd[14440]: improper command pipelining after CONNECT from unknown[107.150.117.219]: \026\003\001\000\306\001\000\000\302\003\003\362\017\332Q\257\366\3500\307\307\236w\202\037G6\206\026\375\263\231%\021\342\000\232\352\f\305\223|\377 \207\204\217\213\245\261o\356g\334a\230\\\353\020\265\366*\317\204\004\241\257\345\306\321\276\212\336W\232T\000.\314\250\314\251\300/\3000\300+\300,\300\t\000\236\314\250\314\252\0003 Dec 29 12:04:37 *hidden* postfix/submission/smtpd[14440]: improper command pipelining after CONNECT from unknown[107.150.117
...
show less
Email Spam
Brute-Force
๐ฎ๐ณ
206.189.139.212
29 Dec 2025
206.189.139.212 - - [29/Dec/2025:12:01:13 +0100] "GET /wp-login.php HTTP/1.1" 302 138 "-" "Mozilla/5 ...
show more
206.189.139.212 - - [29/Dec/2025:12:01:13 +0100] "GET /wp-login.php HTTP/1.1" 302 138 "-" "Mozilla/5.0" 206.189.139.212 - - [29/Dec/2025:12:01:13 +0100] "GET /wp-login.php HTTP/1.1" 302 138 "-" "Mozilla/5.0"
show less
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
3.130.96.91
29 Dec 2025
Dec 29 11:53:09 *hidden* postfix/submission/smtpd[53008]: improper command pipelining after CONNECT ...
show more
Dec 29 11:53:09 *hidden* postfix/submission/smtpd[53008]: improper command pipelining after CONNECT from scan.cypex.ai[3.130.96.91]: GET / HTTP/1.1\r\nHost: 173.212.244.83:587\r\nUser-Agent: cypex.ai/scanning Mozilla/5.0 (Macintosh; Inte Dec 29 11:54:59 *hidden* postfix/submission/smtpd[57269]: improper command pipelining after CONNECT from scan.cypex.ai[3.130.96.91]: \026\003\001\000{\001\000\000w\003\003\223~sR\326/F\344\3466\327\306;a\026g\370\372\347\254\376o3\035[\371N\027\357\016\327\370\000\000\032\300/\300+\300\021\300\a\300\023\300\t\300\024\300\n\000\005\000/\0005\300\022\000\n\001\000\0004\000\005\000\005\001\000\000\000\000\000\n\000\b\000\006\000\027\000\030\000\031\000\v\000 Dec 29 11:58:47 *hidden* postfix/submission/smtpd[917]: improper command pipelining after CONNECT from scan.cypex.ai[3.130.96.91]: \026\003\001\000{\001\000\000w\003\003\350+m\301\244\327\036\022\276\223\223\202B\032t-@Z\316\226-\245\327t\2000\177\251`{/\331\000\000\032\300/\300+\300\021\300\a\300\023
...
show less
Email Spam
Brute-Force
๐ป๐ณ
103.125.189.66
29 Dec 2025
Dec 29 10:06:45 *hidden* kernel: [1930664.800730] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 10:06:45 *hidden* kernel: [1930664.800730] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=103.125.189.66 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x20 TTL=111 ID=13638 DF PROTO=TCP SPT=64553 DPT=2552 WINDOW=200 RES=0x00 CWR ECE SYN URGP=0 Dec 29 10:59:43 *hidden* kernel: [1933842.998716] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=103.125.189.66 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x20 TTL=111 ID=4962 DF PROTO=TCP SPT=63859 DPT=10000 WINDOW=200 RES=0x00 CWR ECE SYN URGP=0 Dec 29 11:51:35 *hidden* kernel: [1936954.607210] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=103.125.189.66 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x20 TTL=111 ID=29143 DF PROTO=TCP SPT=64553 DPT=10000 WINDOW=200 RES=0x00 CWR ECE SYN URGP=0 Dec 29 11:51:38 *hidden* kernel: [1936957.728308] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=103.125.189.66 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=
...
show less
Port Scan
Hacking
๐ญ๐ฐ
59.149.168.144
29 Dec 2025
Dec 29 10:48:21 *hidden* kernel: [1933160.788364] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 29 10:48:21 *hidden* kernel: [1933160.788364] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=59.149.168.144 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=25072 DF PROTO=TCP SPT=63307 DPT=81 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 29 10:48:22 *hidden* kernel: [1933161.800342] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=59.149.168.144 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=25073 DF PROTO=TCP SPT=63307 DPT=81 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 29 10:48:24 *hidden* kernel: [1933163.815368] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=59.149.168.144 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=25074 DF PROTO=TCP SPT=63307 DPT=81 WINDOW=64240 RES=0x00 SYN URGP=0 Dec 29 10:48:28 *hidden* kernel: [1933167.815390] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=59.149.168.144 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=25075 DF
...
show less
Port Scan
Hacking