|
🇷🇺
77.74.177.114
|
|
Detectors: [NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previ ...
show more
Detectors: [NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban | Evidence: Persistent-Slow-Scanner (Strikes: 5), High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.96), Repeat-Offender (Past Bans: 3) | UA: Mozilla/5.0 (Linux; arm_64; Android 12; CPH2205) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 YaBrowser/23.3.3.86.00 SA/3 Mobile Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:0m)
show less
|
Port Scan
Web App Attack
|
|
🇺🇸
4.150.202.145
|
|
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), H ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) | UA: Mozilla/5.0 zgrab/0.x | TCP Fingerprint: Linux (Legacy/Embedded) (Link:IPIP or SIT, Uptime:0m)
show less
|
Port Scan
|
|
🇺🇦
80.243.154.205
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇨🇳
223.85.251.61
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
|
Port Scan
|
|
🇺🇦
37.55.50.222
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇺🇸
47.198.183.36
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇸🇬
68.178.166.175
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇧🇪
207.175.234.128
|
|
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:29585m)
show less
|
Port Scan
Exploited Host
|
|
🇧🇪
34.62.246.147
|
|
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:67813m)
show less
|
Port Scan
Exploited Host
|
|
🇿🇦
102.215.212.15
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇧🇪
34.77.40.110
|
|
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:24216m)
show less
|
Port Scan
Exploited Host
|
|
🇰🇷
175.203.61.49
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
|
Port Scan
|
|
🇺🇸
20.163.11.219
|
|
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), H ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), High-Criminality-Signature (ja4:t13i190800 - Ratio:0.96), High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) | UA: Mozilla/5.0 zgrab/0.x | TCP Fingerprint: Linux (Legacy/Embedded) (Link:IPIP or SIT, Uptime:0m)
show less
|
Port Scan
|
|
🇹🇷
78.180.49.157
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇪🇨
190.95.199.242
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇮🇩
203.30.237.34
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇧🇪
207.175.218.46
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇧🇷
178.132.198.203
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇺🇸
34.139.96.197
|
|
Detectors: [NGINX, SURICATA] | Reasons: Nginx: Repeat offender returning to default/inactive vhost a ...
show more
Detectors: [NGINX, SURICATA] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban | Suricata: Web Server attack | Evidence: Verified-Bot-JA4-Match (t13d1516h2), OS-Signature-Mismatch (UA:Windows/p0f:Linux), Repeat-Offender (Past Bans: 2) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:60894m)
show less
|
Port Scan
Hacking
Web App Attack
|
|
🇷🇪
165.169.161.242
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇧🇪
34.14.124.6
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇺🇸
9.129.0.8
|
|
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Crimi ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d1712h2 - Ratio:0.98), High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:0.98), High-Criminality-Signature (p0f:*:64:0:*:mss*44,9:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.96) | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot | TCP Fingerprint: Android Modern Android (Cellular) (Link:Unknown, Uptime:0m)
show less
|
Port Scan
|
|
🇨🇳
116.168.104.85
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 4), Repeat-Offender (Past Bans: 3)
show less
|
Port Scan
|
|
🇭🇰
154.211.13.102
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
🇺🇸
34.139.8.35
|
|
Detectors: [NGINX, SURICATA] | Reasons: Nginx: Repeat offender returning to default/inactive vhost a ...
show more
Detectors: [NGINX, SURICATA] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban | Suricata: Web Server attack | Evidence: Persistent-Slow-Scanner (Strikes: 8), Verified-Bot-JA4-Match (t13d1516h2), Repeat-Offender (Past Bans: 7) | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:30370m)
show less
|
Port Scan
Hacking
Web App Attack
|