๐ฌ๐ง
2a01:4020:1:1:102::4bf
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed- ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed-Host-Structure, High-Criminality-Signature (ja4:t13i3514h2 - Ratio:0.95) | UA: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:54015m)
show less
Port Scan
Exploited Host
๐ฌ๐ง
2a01:4020:1:1:102::151
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed- ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed-Host-Structure, High-Criminality-Signature (ja4:t13i351300 - Ratio:0.95) | UA: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:65707m)
show less
Port Scan
Exploited Host
๐ฌ๐ง
2a01:4020:1:1:102::5bf
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed- ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed-Host-Structure, High-Criminality-Signature (ja4:t13i3514h1 - Ratio:0.95) | UA: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:59063m)
show less
Port Scan
Exploited Host
๐ฌ๐ง
2a01:4020:1:1:102::5c8
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed- ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed-Host-Structure, High-Criminality-Signature (ja4:t13i3514h2 - Ratio:0.94) | UA: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:21429m)
show less
Port Scan
Exploited Host
๐ฌ๐ง
2a01:4020:1:1:102::687
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed- ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed-Host-Structure, High-Criminality-Signature (ja4:t13i351300 - Ratio:0.94) | UA: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:43474m)
show less
Port Scan
Exploited Host
๐ฌ๐ง
2a01:4020:1:1:102::680
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed- ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: URL-Found-In-UA, Malformed-Host-Structure, High-Criminality-Signature (ja4:t13i3514h1 - Ratio:0.94) | UA: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:5809m)
show less
Port Scan
Exploited Host
๐ฐ๐ช
217.199.148.234
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
Port Scan
๐ฆ๐ท
186.148.225.58
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
Port Scan
๐บ๐ธ
45.79.152.14
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
73.211.36.123
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ฆ
176.103.27.100
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ฎ๐ณ
2401:4900:1c45:c1c6:6d6c:2b84:19de:b83b
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: High-Crimina ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: High-Criminality-Signature (ja4:t12d180800 - Ratio:0.95), High-Criminality-Signature (p0f:*:64:0:*:65535,8:mss,nop,ws,nop,nop,sok:flow:0 - Ratio:0.95) | UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/69.0.0.0 Safari/537.36 | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
Web App Attack
๐น๐ณ
154.110.167.238
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot-JA4-Match (t13d201200), High-Criminality-Signature (ja4:t13d201200 - Ratio:0.99), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96) | UA: Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Windows (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
Web App Attack
๐จ๐ณ
106.75.12.106
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
Port Scan
๐ฆ๐ท
186.19.234.252
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ฉ๐ช
2001:9e8:64c6:7500:cd72:3cb5:7529:97c
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot-JA4-Match (t13d201200), High-Criminality-Signature (ja4:t13d201200 - Ratio:0.99) | UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 | TCP Fingerprint: Unknown (Link:PPPoE, Uptime:0m)
show less
Port Scan
Web App Attack
๐ต๐ธ
185.71.141.6
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
44.238.103.219
10 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: Automated scan targeting an unauthorized host or default ser ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkhole | CrowdSec: Reconnaissance scan | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d2512h1 - Ratio:0.99), High-Criminality-Signature (ja4h:5284a4e8dcdc8b18d4c888678c3ea4b3 - Ratio:0.97) | UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:63299m)
show less
Port Scan
Bad Web Bot
Web App Attack
๐ต๐ฑ
92.62.251.150
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐บ๐ธ
44.233.222.8
10 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical d ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) | CrowdSec: Reconnaissance scan | Evidence: High-Criminality-Signature (ja4:t13d2512h1 - Ratio:0.99) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:7062m)
show less
Port Scan
Web App Attack
Bad Web Bot
๐ง๐ช
35.233.59.252
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
๐ต๐ฑ
45.138.12.21
10 Oct 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: Persis ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: Persistent-Slow-Scanner (Strikes: 4), Trusted-P0F-Signature (*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0), High-Criminality-Signature (ja4:t13d251100 - Ratio:0.95), Repeat-Offender (Past Bans: 3) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:31031m)
show less
Hacking
Web App Attack
๐บ๐ธ
18.206.124.95
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
Port Scan
๐บ๐ธ
3.87.196.69
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
Port Scan
๐บ๐ธ
100.58.171.235
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan