|
๐น๐ผ
45.43.37.254
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 5), Repeat-Offender (Past Bans: 4)
show less
|
Port Scan
|
|
๐ง๐ช
207.175.145.34
|
|
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:5492m)
show less
|
Port Scan
Exploited Host
|
|
๐บ๐ธ
34.168.188.24
|
|
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: Truste ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: Trusted-JA4-Signature (t13d131000), High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.94) | UA: Mozilla/5.0 (X11; Linux x86_64) | TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:0m)
show less
|
Hacking
Web App Attack
|
|
๐ณ๐ฑ
213.177.179.152
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
|
Port Scan
|
|
๐ง๐ช
34.140.100.129
|
|
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:44062m)
show less
|
Port Scan
Exploited Host
|
|
๐ฉ๐ช
34.32.119.209
|
|
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d4312h1 - Ratio:0.97) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:48938m)
show less
|
Hacking
Web App Attack
|
|
๐ณ๐ฑ
213.177.179.160
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
|
Port Scan
|
|
๐จ๐ฑ
201.215.243.179
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
๐ฟ๐ฆ
154.16.95.159
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
๐จ๐ท
177.93.10.24
|
|
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: High-Criminality-Signature (p0f:*:64:0:*:65535,6:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | TCP Fingerprint: Android 10 or newer (Link:PPPoE, Uptime:0m)
show less
|
Port Scan
|
|
๐ฎ๐ฑ
37.122.152.243
|
|
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: High-Criminality-Signature (p0f:*:64:0:*:65535,6:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 | TCP Fingerprint: Android 10 or newer (Link:PPPoE, Uptime:0m)
show less
|
Port Scan
|
|
๐บ๐ธ
178.156.203.2
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 4), Repeat-Offender (Past Bans: 3)
show less
|
Port Scan
|
|
๐ธ๐ฆ
5.111.184.18
|
|
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: High-Criminality-Signature (p0f:*:64:0:*:65535,6:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.97) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | TCP Fingerprint: Android 10 or newer (Link:generic tunnel or VPN, Uptime:0m)
show less
|
Port Scan
|
|
๐ฒ๐ฝ
156.252.15.206
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
๐จ๐ฑ
186.67.240.248
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
๐ฎ๐ถ
62.201.202.105
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
๐ฎ๐ฉ
202.51.199.2
|
|
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Nginx Honeypot: Administration in ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Nginx Honeypot: Administration interface scan | Evidence: High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.98) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15 | TCP Fingerprint: Modern Windows (Link:PPPoE, Uptime:0m)
show less
|
Port Scan
Web App Attack
|
|
๐จ๐ณ
222.92.84.250
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
๐บ๐ธ
40.124.114.203
|
|
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), H ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), High-Criminality-Signature (ja4:t13i1909h2 - Ratio:0.92), High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.94) | UA: Mozilla/5.0 zgrab/0.x | TCP Fingerprint: Linux (Legacy/Embedded) (Link:IPIP or SIT, Uptime:0m)
show less
|
Port Scan
|
|
๐จ๐ณ
124.174.77.133
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
|
Port Scan
|
|
๐ฉ๐ช
34.32.127.1
|
|
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Reconnaissance scan | Nginx Honeypot: Sensitive co ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Reconnaissance scan | Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d4312h1 - Ratio:0.97) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:52492m)
show less
|
Hacking
Web App Attack
Port Scan
|
|
๐บ๐ธ
154.92.23.249
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
|
Port Scan
|
|
๐ธ๐ฆ
176.45.35.110
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
๐บ๐ฆ
176.102.223.36
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|
|
๐ฌ๐ช
94.43.129.120
|
|
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
|
Port Scan
|