๐บ๐ธ
54.87.132.92
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ณ๐ฑ
77.239.124.109
09 Aug 2026
Detectors: [NGINX, SURICATA] | Reasons: Nginx: Default server trap hit | Suricata: Web Server attack ...
show more
Detectors: [NGINX, SURICATA] | Reasons: Nginx: Default server trap hit | Suricata: Web Server attack | UA: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0 | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
Hacking
Exploited Host
Web App Attack
๐จ๐ณ
115.190.181.231
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
Port Scan
๐ฉ๐ช
195.182.16.52
09 Aug 2026
Detectors: [NGINX, nginx_monitor] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on ...
show more
Detectors: [NGINX, nginx_monitor] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole
show less
Port Scan
๐ท๐บ
185.178.208.170
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐จ๐ญ
132.243.161.99
09 Aug 2026
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | UA: Mozilla/5.0 (X11; Linux x86_64; r ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | UA: Mozilla/5.0 (X11; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0 | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
๐ฌ๐ช
194.15.98.17
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ฉ๐ช
94.183.226.226
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ฆ๐ท
181.46.9.140
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐จ๐ณ
115.231.78.3
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 28), Repeat-Offender (Past Bans: 27)
show less
Port Scan
๐ณ๐ด
20.251.112.224
09 Aug 2026
Detectors: [NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) ...
show more
Detectors: [NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) | Evidence: Repeat-Offender (Past Bans: 1)
show less
Bad Web Bot
Web App Attack
๐น๐ท
88.255.41.28
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 4), Repeat-Offender (Past Bans: 2)
show less
Port Scan
๐ช๐ธ
158.158.5.41
09 Aug 2026
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Crimi ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d1712h2 - Ratio:0.96), High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:0.97) | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
๐ฎ๐น
4.232.93.83
09 Aug 2026
Detectors: [NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) ...
show more
Detectors: [NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) | Evidence: Repeat-Offender (Past Bans: 2)
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
34.73.195.77
09 Aug 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d131200 - Ratio:0.92), High-Criminality-Signature (ja4h:42e3de08c65b1ee25ee407fa6b622dac - Ratio:0.91) | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Hacking
Web App Attack
๐ต๐ฑ
20.215.70.187
09 Aug 2026
Detectors: [NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon)
Bad Web Bot
Web App Attack
๐ณ๐ฑ
45.225.135.20
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ซ๐ท
152.228.192.236
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ง๐ท
56.124.106.106
09 Aug 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | UA: Mozilla/5.0 ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Hacking
Web App Attack
๐น๐ท
151.250.231.102
09 Aug 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot-JA4-Match (t13d201200), High-Criminality-Signature (ja4:t13d201200 - Ratio:0.98) | UA: Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/90.0.0.0 Safari/537.36 | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
Web App Attack
๐ฎ๐ณ
9.129.28.24
09 Aug 2026
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Crimi ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d1712h2 - Ratio:0.96), High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:0.97) | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
๐ญ๐ฐ
2602:80d:1003::18
09 Aug 2026
Detectors: [nginx_monitor, NGINX] | Reasons: bad_user_agent | Invalid HTTP protocol or SSTP scan att ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: bad_user_agent | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: Malformed-Host-Structure, URL-Found-In-UA, Known-Scanner-UA (Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)) | UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
show less
Port Scan
๐ง๐ช
34.140.7.54
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ต๐ฑ
194.180.48.64
09 Aug 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | UA: vuln_scanner/3.1.0 ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | UA: vuln_scanner/3.1.0 (CVE-2026-4020) | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
Web App Attack
๐จ๐ณ
222.134.147.66
09 Aug 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan