π¦π·
190.110.178.245
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§πΎ
46.53.210.26
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π©πͺ
34.32.89.115
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d4312h1 - Ratio:0.96) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:38578m)
show less
Hacking
Web App Attack
πΊπΈ
52.247.210.114
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Evidence: Verified-Bot-JA4-Match (t13d131100), Trusted-JA4-Signature (t13d131100), Trusted-P0F-Signature (*:128:0:*:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Windows (Link:IPIP or SIT, Uptime:0m)
show less
Port Scan
Web App Attack
π΅π±
34.116.221.219
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95) | UA: Mozilla/5.0 (iPhone13,2; U; CPU iPhone OS 14_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/15E148 Safari/602.1 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:42379m)
show less
Port Scan
Exploited Host
πΊπΈ
47.164.111.19
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§π·
45.163.63.0
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π―π΅
96.126.130.210
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: OS-Sig ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: OS-Signature-Mismatch (UA:Windows/p0f:Linux), Repeat-Offender (Past Bans: 1) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:61554m)
show less
Hacking
Web App Attack
πΉπΌ
34.80.218.173
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d101000 - Ratio:0.98), High-Criminality-Signature (ja4h:5c0bd253f95ea229356b13014e1fd816 - Ratio:0.97), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:38435m)
show less
Hacking
Web App Attack
πΊπΈ
9.129.45.182
05 Sep 2026
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Crimi ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d1712h2 - Ratio:0.88), High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:0.98), High-Criminality-Signature (p0f:*:64:0:*:mss*44,9:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.97) | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot | TCP Fingerprint: Android Modern Android (Cellular) (Link:Unknown, Uptime:0m)
show less
Port Scan
πΊπΈ
35.164.170.136
05 Sep 2026
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Persistent-Slow-Scanner (Strikes: 6), Repea ...
show more
Detectors: [NGINX] | Reasons: bad_user_agent | Evidence: Persistent-Slow-Scanner (Strikes: 6), Repeat-Offender (Past Bans: 5) | UA: Java/21.0.11 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:70803m)
show less
Port Scan
πΊπΈ
154.54.100.179
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.94) | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/76.0.3809.81 Mobile/15E148 Safari/605.1 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:28525m)
show less
Hacking
Web App Attack
ππ°
34.150.57.148
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d101000 - Ratio:0.98), High-Criminality-Signature (ja4h:5c0bd253f95ea229356b13014e1fd816 - Ratio:0.97), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:64743m)
show less
Hacking
Web App Attack
πΉπΌ
34.81.210.188
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d101000 - Ratio:1.00), High-Criminality-Signature (ja4h:5c0bd253f95ea229356b13014e1fd816 - Ratio:1.00), OS-Signature-Mismatch (UA:Windows/p0f:Linux), Repeat-Offender (Past Bans: 1) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:51338m)
show less
Hacking
Web App Attack
π¨π³
106.75.5.38
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π¨π³
101.96.213.71
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π©πͺ
34.40.64.190
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d4312h1 - Ratio:0.96) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:54894m)
show less
Hacking
Web App Attack
π¨π³
112.229.203.112
05 Sep 2026
Detectors: [SURICATA, NGINX] | Reasons: Suricata: Exploit attempt | Automated scan targeting an unau ...
show more
Detectors: [SURICATA, NGINX] | Reasons: Suricata: Exploit attempt | Automated scan targeting an unauthorized host or default server sinkhole | TCP Fingerprint: Modern Android / Mobile Device (Link:generic tunnel or VPN, Uptime:0m)
show less
Port Scan
Bad Web Bot
Hacking
πΊπΈ
50.89.113.122
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π§πͺ
35.195.59.133
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
π¨π³
118.229.43.254
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (ja4:t13i1909h2 - Ratio:1.00), High-Criminality-Signature (p0f:*:64:0:*:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.95), Repeat-Offender (Past Bans: 1) | UA: host-probe | TCP Fingerprint: Linux (Legacy/Embedded) (Link:PPPoE, Uptime:29637m)
show less
Port Scan
Exploited Host
π¦π·
168.196.246.111
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
πΈπ¬
34.126.95.25
05 Sep 2026
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d101000 - Ratio:0.98), High-Criminality-Signature (ja4h:5c0bd253f95ea229356b13014e1fd816 - Ratio:0.97), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:12129m)
show less
Hacking
Web App Attack
πΊπΈ
67.220.180.114
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 199), Repeat-Offender (Past Bans: 198)
show less
Port Scan
πΊπΈ
72.47.208.90
05 Sep 2026
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | ...
show more
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity | Evidence: Persistent-Slow-Scanner (Strikes: 33), Repeat-Offender (Past Bans: 32)
show less
Port Scan