๐ธ๐ฌ
161.118.205.249
11 Oct 2026
Detectors: [CROWDSEC, NGINX_BURST, NGINX] | Reasons: Nginx: Default server trap hit | CrowdSec: Secu ...
show more
Detectors: [CROWDSEC, NGINX_BURST, NGINX] | Reasons: Nginx: Default server trap hit | CrowdSec: Security alert | Rapid burst scanning (10+ blocked requests in 60s) | UA: WebSiphon/next-0.1 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:63196m)
show less
Port Scan
Exploited Host
Web App Attack
๐ฎ๐ท
81.163.0.91
11 Oct 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: OS-Signature-Mismatch (UA:W ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:0m)
show less
Port Scan
Exploited Host
๐ง๐ฉ
103.132.185.209
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
Port Scan
๐ญ๐ฐ
154.83.15.221
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ง๐ช
34.156.216.251
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
34.21.6.9
11 Oct 2026
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: URL-Found-In-UA, High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: URL-Found-In-UA, High-Criminality-Signature (p0f:*:128:0:*:mss*46,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0 - Ratio:0.99) | UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) | TCP Fingerprint: Legacy Windows (XP/2003) (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
๐จ๐ด
179.1.224.22
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ป๐ช
38.137.177.202
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
35.255.199.87
11 Oct 2026
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: URL-Found-In-UA, High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: URL-Found-In-UA, High-Criminality-Signature (p0f:*:128:0:*:mss*46,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0 - Ratio:0.99) | UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) | TCP Fingerprint: Legacy Windows (XP/2003) (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
๐ฉ๐ช
35.246.245.129
11 Oct 2026
Detectors: [SURICATA, NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost a ...
show more
Detectors: [SURICATA, NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban | Suricata: Web Server attack | Evidence: Persistent-Slow-Scanner (Strikes: 5), High-Criminality-Signature (p0f:*:64:0:*:mss*46,10:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.81), OS-Signature-Mismatch (UA:Windows/p0f:Linux), Repeat-Offender (Past Bans: 4) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Web App Attack
Hacking
Port Scan
๐ป๐ช
38.224.153.27
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ฆ๐ช
83.111.104.150
11 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot-JA4-Match (t13d201200), High-Criminality-Signature (ja4:t13d201200 - Ratio:0.99), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96) | UA: Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/87.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Windows (Link:Unknown, Uptime:0m)
show less
Port Scan
Web App Attack
๐ต๐ฐ
119.63.138.10
11 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot-JA4-Match (t13d201200), High-Criminality-Signature (ja4:t13d201200 - Ratio:0.99), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96) | UA: Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/87.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Windows (Link:PPPoE, Uptime:0m)
show less
Port Scan
Web App Attack
๐ณ๐ฑ
194.36.190.246
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 5), Repeat-Offender (Past Bans: 4)
show less
Port Scan
๐ณ๐ฑ
34.187.14.57
11 Oct 2026
Detectors: [SURICATA, NGINX] | Reasons: Automated scan targeting an unauthorized host or default ser ...
show more
Detectors: [SURICATA, NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkhole | Suricata: Web Server attack | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*46,10:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.81) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Web App Attack
Hacking
Port Scan
Bad Web Bot
๐บ๐ธ
97.107.137.85
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ง๐ช
34.53.196.194
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
2602:fa59:10:172::1
11 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: Verifi ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: Verified-Bot-JA4-Match (t13d131100), Trusted-JA4-Signature (t13d131100), High-Criminality-Signature (ja4h:c308f84e3b7796240a9cfa5ec1c6880f - Ratio:1.00), Repeat-Offender (Past Bans: 1) | UA: Mozilla/5.0 (X11; Linux x86_64) | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:59149m)
show less
Hacking
Web App Attack
๐ฆ๐บ
20.213.164.192
11 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical d ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) | CrowdSec: Security alert | Evidence: Persistent-Slow-Scanner (Strikes: 9), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96), Repeat-Offender (Past Bans: 8) | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
18.212.229.32
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ณ๐ฑ
68.209.56.42
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
34.23.11.226
11 Oct 2026
Detectors: [SURICATA, NGINX] | Reasons: Automated scan targeting an unauthorized host or default ser ...
show more
Detectors: [SURICATA, NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkhole | Suricata: Web Server attack | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*46,10:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.80) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Web App Attack
Hacking
Port Scan
Bad Web Bot
๐บ๐ธ
3.95.56.199
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
54.159.49.205
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
Port Scan
๐ป๐ช
190.111.121.15
11 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan