๐บ๐ธ
172.200.145.154
28 Jul 2026
Detectors: [CROWDSEC, NGINX] | Reasons: bad_user_agent | CrowdSec: Security alert | Evidence: High-C ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: bad_user_agent | CrowdSec: Security alert | Evidence: High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.98) | UA: python-requests/2.32.4 | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Port Scan
Web App Attack
๐ณ๐ด
51.120.83.160
28 Jul 2026
Detectors: [CROWDSEC] | Reasons: CrowdSec: Security alert | Evidence: High-Criminality-Signature (p0 ...
show more
Detectors: [CROWDSEC] | Reasons: CrowdSec: Security alert | Evidence: High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.98), Repeat-Offender (Past Bans: 1) | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Web App Attack
๐ฉ๐ช
88.198.70.24
28 Jul 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐น๐ณ
41.230.60.199
28 Jul 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ฎ๐น
172.213.216.126
28 Jul 2026
Detectors: [CROWDSEC] | Reasons: CrowdSec: Security alert | Evidence: High-Criminality-Signature (p0 ...
show more
Detectors: [CROWDSEC] | Reasons: CrowdSec: Security alert | Evidence: High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.98) | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Web App Attack
๐บ๐ธ
35.245.89.14
28 Jul 2026
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: URL-Found-In-UA, High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: URL-Found-In-UA, High-Criminality-Signature (p0f:*:128:0:*:mss*46,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0 - Ratio:0.97) | UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) | TCP Fingerprint: Legacy Windows (XP/2003) (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
๐บ๐ธ
35.171.50.91
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:26883,11:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.91) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:0m)
show less
Port Scan
Exploited Host
๐บ๐ธ
24.42.198.77
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:65535,6:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) | UA: Python/3.12 aiohttp/3.14.1 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:0m)
show less
Port Scan
Exploited Host
๐ฐ๐ท
61.41.4.17
28 Jul 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
2a04:c300:1000::34a
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (ja4:t13d131200 - Ratio:0.90), TCP/IP-Spoofing-Detected (bad_sw: 2) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:26590m)
show less
Port Scan
Exploited Host
๐ฉ๐ช
207.241.172.220
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (ja4:t13d131200 - Ratio:0.90), High-Criminality-Signature (p0f:*:64:0:*:mss*29,9:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.93) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:GIF, Uptime:0m)
show less
Port Scan
Exploited Host
๐ท๐ด
193.46.255.160
28 Jul 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ง๐ช
34.140.193.9
28 Jul 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ธ๐ฌ
43.134.23.177
28 Jul 2026
Detectors: [NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkho ...
show more
Detectors: [NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkhole | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:Unknown, Uptime:0m)
show less
Port Scan
Bad Web Bot
๐ธ๐ฌ
43.134.93.164
28 Jul 2026
Detectors: [NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkho ...
show more
Detectors: [NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.97) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:Unknown, Uptime:0m)
show less
Port Scan
Bad Web Bot
๐ฌ๐ง
2a03:b0c0:1:d0::be3:b001
28 Jul 2026
Detectors: [NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkho ...
show more
Detectors: [NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkhole | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:37068m)
show less
Port Scan
Bad Web Bot
๐ง๐ช
207.175.75.5
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:64417m)
show less
Port Scan
Exploited Host
๐ธ๐ช
192.71.142.35
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:0m)
show less
Port Scan
Exploited Host
๐ง๐ช
34.62.84.85
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:50400m)
show less
Port Scan
Exploited Host
๐บ๐ธ
209.87.162.166
28 Jul 2026
Detectors: [CROWDSEC, NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | CrowdS ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | CrowdSec: Security alert | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,10:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.91) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:IPSec or GRE, Uptime:65533m)
show less
Hacking
Web App Attack
๐บ๐ธ
67.217.246.51
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) | UA: Mozilla/5.0 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:70926m)
show less
Port Scan
Exploited Host
๐ง๐ช
34.53.169.125
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:46880m)
show less
Port Scan
Exploited Host
๐ง๐ช
207.175.108.140
28 Jul 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ท๐บ
45.144.220.67
28 Jul 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
162.144.121.110
28 Jul 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: URL-Fo ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: URL-Found-In-UA | UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:48447m)
show less
Hacking
Web App Attack