πΊπΈ
18.206.124.95
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 1)
show less
Port Scan
πΊπΈ
3.87.196.69
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
Port Scan
πΊπΈ
100.58.171.235
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π©π°
45.156.145.250
10 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Nginx Honeypot: Sensitive configu ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: CrowdSec: Security alert | Nginx Honeypot: Sensitive configuration file search | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/119.0 | TCP Fingerprint: Modern Windows (Link:Unknown, Uptime:0m)
show less
Web App Attack
Hacking
π«π·
88.168.24.221
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Repeat-Offender (Past Bans: 2)
show less
Port Scan
π§π·
191.15.12.223
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§πͺ
207.175.82.61
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π¨π³
47.94.163.124
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π¬π§
92.239.21.252
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π¨π³
43.226.39.177
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπ¦
46.175.136.74
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§πͺ
34.78.228.73
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§πͺ
35.187.71.96
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π±πΉ
194.165.16.165
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§πͺ
34.77.160.142
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§π·
177.130.51.5
10 Oct 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΊπΈ
35.85.255.183
10 Oct 2026
Detectors: [NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) ...
show more
Detectors: [NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) | Evidence: High-Criminality-Signature (ja4:t13d2512h1 - Ratio:0.99) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:19145m)
show less
Bad Web Bot
Web App Attack
π§πͺ
146.148.5.47
10 Oct 2026
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (ja4:t13i250900 - Ratio:0.96), High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:59464m)
show less
Port Scan
Exploited Host
π§πͺ
207.175.55.128
10 Oct 2026
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (ja4:t13i250900 - Ratio:0.96), High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:2220m)
show less
Port Scan
Exploited Host
π§πͺ
207.175.148.113
10 Oct 2026
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:43496m)
show less
Port Scan
Exploited Host
ππ°
40.83.95.41
10 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical d ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: Targeting a decommissioned/expired domain name (historical data recon) | CrowdSec: Security alert | Evidence: Persistent-Slow-Scanner (Strikes: 8), High-Criminality-Signature (p0f:*:128:0:*:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96), Repeat-Offender (Past Bans: 7) | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Web App Attack
Bad Web Bot
π§πͺ
34.77.91.206
10 Oct 2026
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (ja4:t13i250900 - Ratio:0.96), High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:16689m)
show less
Port Scan
Exploited Host
π§πͺ
34.78.84.121
10 Oct 2026
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:35490m)
show less
Port Scan
Exploited Host
πΊπΈ
100.23.110.101
10 Oct 2026
Detectors: [CROWDSEC, NGINX] | Reasons: Automated scan targeting an unauthorized host or default ser ...
show more
Detectors: [CROWDSEC, NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkhole | CrowdSec: Reconnaissance scan | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d2512h1 - Ratio:0.99), High-Criminality-Signature (ja4h:5284a4e8dcdc8b18d4c888678c3ea4b3 - Ratio:0.97) | UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:3281m)
show less
Port Scan
Bad Web Bot
Web App Attack
π§πͺ
34.140.197.212
10 Oct 2026
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:71180m)
show less
Port Scan
Exploited Host