π»π³
103.125.189.66
24 Dec 2025
Dec 24 10:52:33 *hidden* kernel: [1501410.469530] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 10:52:33 *hidden* kernel: [1501410.469530] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=103.125.189.66 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x20 TTL=111 ID=21886 DF PROTO=TCP SPT=63853 DPT=44444 WINDOW=200 RES=0x00 CWR ECE SYN URGP=0 Dec 24 10:52:42 *hidden* kernel: [1501419.499037] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=103.125.189.66 DST=173.212.244.83 LEN=48 TOS=0x00 PREC=0x20 TTL=111 ID=22018 DF PROTO=TCP SPT=63853 DPT=44444 WINDOW=200 RES=0x00 SYN URGP=0 Dec 24 11:39:33 *hidden* kernel: [1504230.500283] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=103.125.189.66 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x20 TTL=111 ID=13268 DF PROTO=TCP SPT=64654 DPT=44444 WINDOW=200 RES=0x00 CWR ECE SYN URGP=0 Dec 24 11:39:36 *hidden* kernel: [1504233.520107] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=103.125.189.66 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x20 T
...
show less
Port Scan
Hacking
π©πͺ
185.91.127.107
24 Dec 2025
Dec 24 11:04:48 *hidden* kernel: [1502145.056829] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 11:04:48 *hidden* kernel: [1502145.056829] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=185.91.127.107 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=55479 PROTO=TCP SPT=52384 DPT=60018 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 24 11:06:09 *hidden* kernel: [1502226.138606] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=185.91.127.107 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=12737 PROTO=TCP SPT=51011 DPT=60097 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 24 11:10:04 *hidden* kernel: [1502460.861039] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=185.91.127.107 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=45920 PROTO=TCP SPT=60288 DPT=60278 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 24 11:11:33 *hidden* kernel: [1502550.305519] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=185.91.127.107 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=36575 PROTO=T
...
show less
Port Scan
Hacking
πΊπΈ
2607:ff10:c8:594::e
24 Dec 2025
Dec 24 09:56:00 *hidden* kernel: [1498017.768604] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 09:56:00 *hidden* kernel: [1498017.768604] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:86:dd SRC=2607:ff10:00c8:0594:0000:0000:0000:000e DST=2a02:c207:2031:6131:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=51661 DPT=9000 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 24 09:57:37 *hidden* kernel: [1498114.493298] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:86:dd SRC=2607:ff10:00c8:0594:0000:0000:0000:000e DST=2a02:c207:2031:6131:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=58935 DPT=1900 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 24 10:48:53 *hidden* kernel: [1501190.092137] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:86:dd SRC=2607:ff10:00c8:0594:0000:0000:0000:000e DST=2a02:c207:2031:6131:0000:0000:0000:0001 LEN=60 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=TCP SPT=47532 DPT=1022 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 24 10:51:24 *hidden* kernel: [1501340.841210] [UFW BLOCK] IN=eth0 OUT= MAC=00:
...
show less
Port Scan
Hacking
π¨π¦
38.49.209.146
24 Dec 2025
38.49.209.146 - - [24/Dec/2025:10:36:48 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Python/3.14 aiohttp ...
show more
38.49.209.146 - - [24/Dec/2025:10:36:48 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Python/3.14 aiohttp/3.13.2" 38.49.209.146 - - [24/Dec/2025:10:36:54 +0100] "GET /.env.example HTTP/1.1" 301 162 "-" "Python/3.14 aiohttp/3.13.2"
show less
Port Scan
Bad Web Bot
Web App Attack
πΊπΈ
3.143.33.63
24 Dec 2025
Dec 24 10:23:37 *hidden* postfix/submission/smtpd[12076]: improper command pipelining after CONNECT ...
show more
Dec 24 10:23:37 *hidden* postfix/submission/smtpd[12076]: improper command pipelining after CONNECT from scan.cypex.ai[3.143.33.63]: \n Dec 24 10:25:16 *hidden* postfix/submission/smtpd[12076]: improper command pipelining after CONNECT from scan.cypex.ai[3.143.33.63]: GET / HTTP/1.1\r\nHost: 173.212.244.83:587\r\nUser-Agent: cypex.ai/scanning Mozilla/5.0 (Macintosh; Inte Dec 24 10:27:13 *hidden* postfix/submission/smtpd[22289]: improper command pipelining after CONNECT from scan.cypex.ai[3.143.33.63]: GET / HTTP/1.1\r\nHost: 173.212.244.83:587\r\nUser-Agent: cypex.ai/scanning Mozilla/5.0 (Macintosh; Inte
show less
Email Spam
Brute-Force
πΊπΈ
216.180.246.135
24 Dec 2025
Dec 24 10:08:03 *hidden* kernel: [1498739.938721] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 10:08:03 *hidden* kernel: [1498739.938721] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.135 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=37543 PROTO=TCP SPT=21519 DPT=14801 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 10:10:04 *hidden* kernel: [1498861.509117] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.135 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=19138 PROTO=TCP SPT=21519 DPT=853 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 10:11:50 *hidden* kernel: [1498967.444335] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.135 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=52656 PROTO=TCP SPT=21519 DPT=12999 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 10:13:18 *hidden* kernel: [1499054.906726] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.135 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=38549 PROTO=TC
...
show less
Port Scan
Hacking
π³π±
45.156.128.121
24 Dec 2025
2025/12/24 09:42:32 [error] 2352#2352: *36991 limiting requests, excess: 3.282 by zone "ANTIDDOS6", ...
show more
2025/12/24 09:42:32 [error] 2352#2352: *36991 limiting requests, excess: 3.282 by zone "ANTIDDOS6", client: 45.156.128.121, server: 173.212.244.83, request: "GET / HTTP/1.1", host: "173.212.244.83", referrer: "http://173.212.244.83/solr/#/" 2025/12/24 09:42:49 [error] 2352#2352: *36996 limiting requests, excess: 3.015 by zone "ANTIDDOS6", client: 45.156.128.121, server: 173.212.244.83, request: "GET / HTTP/1.1", host: "173.212.244.83", referrer: "http://173.212.244.83/console" 2025/12/24 09:42:49 [error] 2352#2352: *37000 limiting requests, excess: 3.008 by zone "ANTIDDOS6", client: 45.156.128.121, server: 173.212.244.83, request: "GET / HTTP/1.1", host: "173.212.244.83", referrer: "http://173.212.244.83/cgi-bin/authLogin.cgi"
show less
DDoS Attack
Web App Attack
π³π±
45.156.128.122
24 Dec 2025
45.156.128.122 - - [24/Dec/2025:09:42:49 +0100] "GET /license.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 ...
show more
45.156.128.122 - - [24/Dec/2025:09:42:49 +0100] "GET /license.txt HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.128.122 - - [24/Dec/2025:09:42:49 +0100] "GET / HTTP/1.1" 503 592 "http://173.212.244.83/license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
show less
Port Scan
Bad Web Bot
Web App Attack
π³π±
45.156.128.124
24 Dec 2025
2025/12/24 09:40:47 [error] 2352#2352: *36975 limiting requests, excess: 3.520 by zone "ANTIDDOS6", ...
show more
2025/12/24 09:40:47 [error] 2352#2352: *36975 limiting requests, excess: 3.520 by zone "ANTIDDOS6", client: 45.156.128.124, server: 173.212.244.83, request: "GET / HTTP/1.1", host: "173.212.244.83", referrer: "http://173.212.244.83/Web/Auth" 2025/12/24 09:41:32 [error] 2352#2352: *36981 limiting requests, excess: 3.798 by zone "ANTIDDOS6", client: 45.156.128.124, server: 173.212.244.83, request: "GET / HTTP/1.1", host: "173.212.244.83", referrer: "http://173.212.244.83/js/NewWindow_2_all.js" 2025/12/24 09:41:33 [error] 2352#2352: *36983 limiting requests, excess: 3.794 by zone "ANTIDDOS6", client: 45.156.128.124, server: 173.212.244.83, request: "GET / HTTP/1.1", host: "173.212.244.83", referrer: "http://173.212.244.83/sitecore/shell/sitecore.version.xml"
show less
DDoS Attack
Web App Attack
π©πͺ
167.94.146.54
24 Dec 2025
Dec 24 09:28:16 *hidden* kernel: [1496352.874355] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 09:28:16 *hidden* kernel: [1496352.874355] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=167.94.146.54 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=5051 DF PROTO=TCP SPT=39636 DPT=30006 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:28:17 *hidden* kernel: [1496353.875314] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=167.94.146.54 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=6283 DF PROTO=TCP SPT=39638 DPT=30006 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:28:18 *hidden* kernel: [1496354.884686] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=167.94.146.54 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=6284 DF PROTO=TCP SPT=39638 DPT=30006 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:28:18 *hidden* kernel: [1496355.100568] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=167.94.146.54 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=18773 DF PR
...
show less
Port Scan
Hacking
πΊπΈ
162.142.125.218
24 Dec 2025
Dec 24 09:27:35 *hidden* kernel: [1496312.299751] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 09:27:35 *hidden* kernel: [1496312.299751] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=162.142.125.218 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20952 DF PROTO=TCP SPT=23708 DPT=2224 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:27:36 *hidden* kernel: [1496313.300927] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=162.142.125.218 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=20953 DF PROTO=TCP SPT=23708 DPT=2224 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:27:36 *hidden* kernel: [1496313.334277] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=162.142.125.218 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=12682 DF PROTO=TCP SPT=23740 DPT=2224 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:27:37 *hidden* kernel: [1496314.388675] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=162.142.125.218 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=126
...
show less
Port Scan
Hacking
πΊπΈ
66.132.153.125
24 Dec 2025
Dec 24 09:26:16 *hidden* kernel: [1496233.731284] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 09:26:16 *hidden* kernel: [1496233.731284] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=66.132.153.125 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=19490 DF PROTO=TCP SPT=21276 DPT=8069 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:26:17 *hidden* kernel: [1496234.746700] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=66.132.153.125 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=19491 DF PROTO=TCP SPT=21276 DPT=8069 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:26:18 *hidden* kernel: [1496234.781111] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=66.132.153.125 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=24332 DF PROTO=TCP SPT=21300 DPT=8069 WINDOW=21900 RES=0x00 SYN URGP=0 Dec 24 09:26:19 *hidden* kernel: [1496235.836098] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=66.132.153.125 DST=173.212.244.83 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=24333 D
...
show less
Port Scan
Hacking
πΊπΈ
216.180.246.133
24 Dec 2025
Dec 24 09:12:11 *hidden* kernel: [1495388.386908] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 09:12:11 *hidden* kernel: [1495388.386908] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.133 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=49612 PROTO=TCP SPT=21159 DPT=8784 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 09:16:49 *hidden* kernel: [1495665.958413] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.133 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=62996 PROTO=TCP SPT=21159 DPT=222 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 09:20:57 *hidden* kernel: [1495913.933026] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.133 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x60 TTL=58 ID=56706 PROTO=TCP SPT=21159 DPT=8048 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 09:22:31 *hidden* kernel: [1496007.941155] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.133 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=33339 PROTO=TCP
...
show less
Port Scan
Hacking
πΈπ¬
4.193.209.111
24 Dec 2025
4.193.209.111 - - [24/Dec/2025:08:51:12 +0100] "GET /lala.php HTTP/1.1" 404 146 "-" "-" 4.193.209.11 ...
show more
4.193.209.111 - - [24/Dec/2025:08:51:12 +0100] "GET /lala.php HTTP/1.1" 404 146 "-" "-" 4.193.209.111 - - [24/Dec/2025:08:51:29 +0100] "GET /.well-known/log.php HTTP/1.1" 404 146 "-" "-"
show less
Port Scan
Bad Web Bot
Web App Attack
π¬π§
78.153.140.179
24 Dec 2025
78.153.140.179 - - [24/Dec/2025:07:45:45 +0100] "GET /.env HTTP/1.1" 400 154 "-" "Mozilla/4.0 (compa ...
show more
78.153.140.179 - - [24/Dec/2025:07:45:45 +0100] "GET /.env HTTP/1.1" 400 154 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1; Media Center PC 3.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1)" 78.153.140.179 - - [24/Dec/2025:07:45:45 +0100] "GET /api/.env HTTP/1.1" 400 154 "-" "Mozilla/5.0 (iPod touch; CPU iPhone OS 11_1_1 like Mac OS X) AppleWebKit/604.3.5 (KHTML, like Gecko) Version/11.0 Mobile/15B150 Safari/604.1"
show less
Port Scan
Bad Web Bot
Web App Attack
πΊπΈ
216.180.246.55
24 Dec 2025
Dec 24 06:45:33 *hidden* kernel: [1486590.460540] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 06:45:33 *hidden* kernel: [1486590.460540] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.55 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=31341 PROTO=TCP SPT=21116 DPT=1194 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 06:46:57 *hidden* kernel: [1486674.363942] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.55 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=13075 PROTO=TCP SPT=21116 DPT=40202 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 06:47:40 *hidden* kernel: [1486717.264533] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.55 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=56910 PROTO=TCP SPT=21116 DPT=11111 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 06:49:15 *hidden* kernel: [1486812.028114] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.55 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=257 PROTO=TCP SPT
...
show less
Port Scan
Hacking
π°π·
4.217.183.253
24 Dec 2025
4.217.183.253 - - [24/Dec/2025:06:46:05 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 302 1 ...
show more
4.217.183.253 - - [24/Dec/2025:06:46:05 +0100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 302 138 "-" "-" 4.217.183.253 - - [24/Dec/2025:06:46:32 +0100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 302 138 "-" "-"
show less
Port Scan
Bad Web Bot
Web App Attack
πΊπΈ
216.180.246.28
24 Dec 2025
Dec 24 06:37:54 *hidden* kernel: [1486130.935915] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 06:37:54 *hidden* kernel: [1486130.935915] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.28 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=62521 PROTO=TCP SPT=21193 DPT=35443 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 06:39:26 *hidden* kernel: [1486222.888809] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.28 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x60 TTL=58 ID=64542 PROTO=TCP SPT=21193 DPT=1200 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 06:40:18 *hidden* kernel: [1486274.792916] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.28 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=23977 PROTO=TCP SPT=21193 DPT=9111 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 06:42:27 *hidden* kernel: [1486404.679994] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.28 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=49133 PROTO=TCP SP
...
show less
Port Scan
Hacking
πΊπΈ
216.180.246.163
24 Dec 2025
Dec 24 04:47:42 *hidden* kernel: [1479519.417109] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 04:47:42 *hidden* kernel: [1479519.417109] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.163 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=36108 PROTO=TCP SPT=21847 DPT=8088 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 04:49:11 *hidden* kernel: [1479607.724276] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.163 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=42566 PROTO=TCP SPT=21847 DPT=1554 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 04:50:30 *hidden* kernel: [1479687.393139] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.163 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x60 TTL=58 ID=49749 PROTO=TCP SPT=21847 DPT=23455 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 04:51:32 *hidden* kernel: [1479749.327712] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.163 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=8480 PROTO=TCP
...
show less
Port Scan
Hacking
π³π±
172.233.57.39
24 Dec 2025
172.233.57.39 - - [24/Dec/2025:04:31:51 +0100] "GET /administrator/manifests/files/joomla.xml HTTP/1 ...
show more
172.233.57.39 - - [24/Dec/2025:04:31:51 +0100] "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 404 878 "-" "curl/7.54.0" 172.233.57.39 - - [24/Dec/2025:04:31:51 +0100] "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 301 162 "-" "curl/7.54.0"
show less
Port Scan
Bad Web Bot
Web App Attack
πΊπΈ
216.180.246.144
24 Dec 2025
Dec 24 03:08:50 *hidden* kernel: [1473587.222235] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 03:08:50 *hidden* kernel: [1473587.222235] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.144 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=45528 PROTO=TCP SPT=21361 DPT=5160 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 03:09:12 *hidden* kernel: [1473608.728058] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.144 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x60 TTL=58 ID=31154 PROTO=TCP SPT=21361 DPT=8011 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 03:09:24 *hidden* kernel: [1473620.949227] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.144 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=61803 PROTO=TCP SPT=21361 DPT=9013 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 24 03:10:05 *hidden* kernel: [1473661.694665] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=216.180.246.144 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=1159 PROTO=TCP
...
show less
Port Scan
Hacking
πΊπΈ
209.38.70.130
23 Dec 2025
209.38.70.130 - - [24/Dec/2025:00:58:41 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydro ...
show more
209.38.70.130 - - [24/Dec/2025:00:58:41 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 209.38.70.130 - - [24/Dec/2025:00:58:41 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);"
show less
Port Scan
Bad Web Bot
Web App Attack
π³π±
88.210.63.69
23 Dec 2025
Dec 23 23:40:29 *hidden* kernel: [1461086.058267] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 23 23:40:29 *hidden* kernel: [1461086.058267] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=88.210.63.69 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=5369 PROTO=TCP SPT=47496 DPT=20967 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 24 00:12:40 *hidden* kernel: [1463017.543019] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=88.210.63.69 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=4701 PROTO=TCP SPT=47496 DPT=20951 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 24 00:24:08 *hidden* kernel: [1463704.576092] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=88.210.63.69 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=30693 PROTO=TCP SPT=47496 DPT=20973 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 24 00:36:21 *hidden* kernel: [1464438.506516] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=88.210.63.69 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=16305 PROTO=TCP SPT=47
...
show less
Port Scan
Hacking
π³π±
194.50.16.73
23 Dec 2025
Dec 24 00:18:29 *hidden* kernel: [1463366.526892] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0: ...
show more
Dec 24 00:18:29 *hidden* kernel: [1463366.526892] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=194.50.16.73 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=41233 PROTO=TCP SPT=51893 DPT=8089 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 24 00:19:39 *hidden* kernel: [1463436.086598] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=194.50.16.73 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=31890 PROTO=TCP SPT=51893 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 24 00:27:02 *hidden* kernel: [1463879.326562] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=194.50.16.73 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=4029 PROTO=TCP SPT=51732 DPT=161 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 24 00:36:49 *hidden* kernel: [1464466.272343] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=194.50.16.73 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=8059 PROTO=TCP SPT=51893
...
show less
Port Scan
Hacking
πΈπ¬
152.42.245.16
23 Dec 2025
152.42.245.16 - - [24/Dec/2025:00:04:25 +0100] "GET /.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; L ...
show more
152.42.245.16 - - [24/Dec/2025:00:04:25 +0100] "GET /.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 152.42.245.16 - - [24/Dec/2025:00:04:28 +0100] "GET /.env HTTP/1.1" 403 2526 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
show less
Port Scan
Bad Web Bot
Web App Attack