π¦πΊ
20.92.239.62
12 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Automated scan targeting an unaut ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Automated scan targeting an unauthorized host or default server sinkhole | Evidence: Persistent-Slow-Scanner (Strikes: 6), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96), Repeat-Offender (Past Bans: 5) | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Port Scan
Bad Web Bot
Web App Attack
π·πΊ
178.57.122.138
12 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπΈ
74.194.249.179
12 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π΅π°
223.123.43.240
12 Oct 2026
Detectors: [SURICATA, NGINX] | Reasons: Suricata: Reconnaissance Scan | Suricata: Exploit attempt | ...
show more
Detectors: [SURICATA, NGINX] | Reasons: Suricata: Reconnaissance Scan | Suricata: Exploit attempt | Nginx Honeypot: Network hardware exploit attempt | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*10,5:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98) | UA: Hello, World | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:IPIP or SIT, Uptime:0m)
show less
Hacking
Port Scan
Exploited Host
πΊπ¬
102.134.140.192
12 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (p0f:*:255:0:*:1024,0:mss::0 - Ratio:0.93), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:0m)
show less
Hacking
Web App Attack
π¨π³
1.30.164.62
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π―π΅
104.46.232.28
11 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical d ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) | CrowdSec: Security alert | Evidence: High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96) | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Web App Attack
Bad Web Bot
πΉπ·
85.95.238.182
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π«π·
194.163.185.131
11 Oct 2026
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evid ...
show more
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,9:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.88) | TCP Fingerprint: Android Modern Android (Cellular) (Link:PPPoE, Uptime:0m)
show less
Port Scan
π°π·
52.141.3.247
11 Oct 2026
Detectors: [CROWDSEC] | Reasons: CrowdSec: Security alert | Evidence: Persistent-Slow-Scanner (Strik ...
show more
Detectors: [CROWDSEC] | Reasons: CrowdSec: Security alert | Evidence: Persistent-Slow-Scanner (Strikes: 7), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96), Repeat-Offender (Past Bans: 6) | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Web App Attack
π·π΄
80.94.92.21
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 6), Repeat-Offender (Past Bans: 5)
show less
Port Scan
πΉπ·
188.132.199.206
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 59), Repeat-Offender (Past Bans: 58)
show less
Port Scan
πΊπ¦
193.33.39.61
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π©πΏ
41.111.208.66
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π²π½
189.202.239.213
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§π·
2804:d84:222e:6e00:937:226a:d281:5c73
11 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: High-Crimina ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: High-Criminality-Signature (ja4:t12d180800 - Ratio:0.95), High-Criminality-Signature (p0f:*:64:0:*:65535,8:mss,nop,ws,nop,nop,sok:flow:0 - Ratio:0.95) | UA: Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36 | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
Web App Attack
ππ°
40.83.95.41
11 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Automated scan targeting an unaut ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Automated scan targeting an unauthorized host or default server sinkhole | Evidence: Persistent-Slow-Scanner (Strikes: 13), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96), Repeat-Offender (Past Bans: 12) | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Port Scan
Bad Web Bot
Web App Attack
π¨π
209.99.184.98
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΉπΌ
45.43.37.254
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 8), Repeat-Offender (Past Bans: 7)
show less
Port Scan
πΉπ·
92.44.30.63
11 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot-JA4-Match (t13d201200), High-Criminality-Signature (ja4:t13d201200 - Ratio:0.99), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96), OS-Signature-Mismatch (UA:Linux/p0f:Windows) | UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Windows (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
Web App Attack
π¨π±
181.72.185.75
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π°π·
203.248.82.124
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
Port Scan
π¨π³
123.145.37.132
11 Oct 2026
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evid ...
show more
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.96) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:24153m)
show less
Port Scan
π¨π³
123.245.84.101
11 Oct 2026
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evid ...
show more
Detectors: [NGINX] | Reasons: Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.96) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
π¨π³
139.170.73.137
11 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Invalid HTTP protocol or SSTP sca ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (ja4:t13i130900 - Ratio:0.94), High-Criminality-Signature (p0f:*:64:0:*:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.96) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Web App Attack
Port Scan