π¨π±
45.232.176.221
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πͺπΈ
89.32.118.8
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπΈ
20.65.144.103
01 Sep 2026
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), H ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) | UA: Mozilla/5.0 zgrab/0.x | TCP Fingerprint: Linux (Legacy/Embedded) (Link:IPIP or SIT, Uptime:0m)
show less
Port Scan
πΊπΈ
107.150.97.10
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π¦πΉ
185.242.177.61
01 Sep 2026
Detectors: [NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previ ...
show more
Detectors: [NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban | Evidence: OS-Signature-Mismatch (UA:Windows/p0f:Linux), Repeat-Offender (Past Bans: 1) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:0m)
show less
Port Scan
Web App Attack
πΊπΈ
97.93.125.190
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΉπΌ
45.43.37.254
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 4), Repeat-Offender (Past Bans: 3)
show less
Port Scan
πΊπΈ
40.124.83.18
01 Sep 2026
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evid ...
show more
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) | TCP Fingerprint: Linux (Legacy/Embedded) (Link:IPIP or SIT, Uptime:0m)
show less
Port Scan
π¨π³
42.83.147.53
01 Sep 2026
Detectors: [NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previ ...
show more
Detectors: [NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:1.00), OS-Signature-Mismatch (UA:Windows/p0f:Linux), Repeat-Offender (Past Bans: 2) | UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:65239m)
show less
Port Scan
Web App Attack
π«π·
169.58.96.145
01 Sep 2026
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | TCP ...
show more
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | TCP Fingerprint: Modern Windows (Link:PPPoE, Uptime:0m)
show less
Port Scan
π·πΊ
87.251.66.118
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
Port Scan
πͺπΈ
93.90.77.44
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπ¦
91.236.126.30
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπ¦
193.107.177.44
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΉπ
182.52.51.215
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπΈ
44.243.206.105
01 Sep 2026
Detectors: [NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previ ...
show more
Detectors: [NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban | Evidence: High-Criminality-Signature (p0f:*:128:0:*:62727,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.80), OS-Signature-Mismatch (UA:Windows/p0f:Linux), Repeat-Offender (Past Bans: 1) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0. | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:41683m)
show less
Port Scan
Web App Attack
πΊπΈ
84.32.32.40
01 Sep 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: Malformed-Connection-Struct ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: Malformed-Connection-Structure, High-Criminality-Signature (ja4:t13i130900 - Ratio:0.96), High-Criminality-Signature (p0f:*:64:0:*:mss*44,10:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.90), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:0m)
show less
Port Scan
Exploited Host
π¬π§
178.62.11.159
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπ¦
91.209.11.175
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπΈ
45.55.186.92
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 5), Repeat-Offender (Past Bans: 4)
show less
Port Scan
πΊπΈ
40.119.28.169
01 Sep 2026
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), H ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Known-Scanner-UA (Mozilla/5.0 zgrab/0.x), High-Criminality-Signature (ja4:t13i1909h2 - Ratio:0.91), High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) | UA: Mozilla/5.0 zgrab/0.x | TCP Fingerprint: Linux (Legacy/Embedded) (Link:IPIP or SIT, Uptime:0m)
show less
Port Scan
π°π·
175.119.225.92
01 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
Port Scan
π¨π³
182.242.168.170
01 Sep 2026
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evid ...
show more
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.99) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
π¨π³
58.212.237.20
01 Sep 2026
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evid ...
show more
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.99) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
π¨π³
111.113.88.83
01 Sep 2026
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evid ...
show more
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.99) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan