|
🇳🇱
195.178.110.72
|
|
CrowdSec local detection on srv1349699: http-generic-403-bf. Blocked. AS48090 (BG), 6 events.
|
Brute-Force
Web App Attack
|
|
🇭🇰
172.68.211.132
|
|
2026-07-21T19:09:34.571349-03:00 srv1251771 kernel: [163128.805968] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T19:09:34.571349-03:00 srv1251771 kernel: [163128.805968] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.68.211.132 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=50375 DF PROTO=TCP SPT=14022 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T19:09:35.580772-03:00 srv1251771 kernel: [163129.815219] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.68.211.132 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=50376 DF PROTO=TCP SPT=14022 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T19:09:36.605315-03:00 srv1251771 kernel: [163130.839813] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.68.211.132 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=50377 DF PROTO=TCP SPT=14022 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇨🇳
8.133.163.2
|
|
2026-07-21T18:44:59.160697-03:00 srv1251771 kernel: [161653.399388] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T18:44:59.160697-03:00 srv1251771 kernel: [161653.399388] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=8.133.163.2 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=14053 DF PROTO=TCP SPT=48862 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0
2026-07-21T18:45:00.168619-03:00 srv1251771 kernel: [161654.402628] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=8.133.163.2 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=14054 DF PROTO=TCP SPT=48862 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0
2026-07-21T18:45:02.170764-03:00 srv1251771 kernel: [161656.406137] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=8.133.163.2 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=14055 DF PROTO=TCP SPT=48862 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
160.79.104.10
|
|
2026-07-21T17:27:46.362286-03:00 srv01 kernel: [939292.379298] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ...
show more
2026-07-21T17:27:46.362286-03:00 srv01 kernel: [939292.379298] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=160.79.104.10 DST=177.19.138.245 LEN=76 TOS=0x00 PREC=0x00 TTL=56 ID=50561 DF PROTO=TCP SPT=443 DPT=60436 WINDOW=20 RES=0x00 ACK PSH URGP=0
2026-07-21T17:27:56.321409-03:00 srv01 kernel: [939302.338503] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=160.79.104.10 DST=177.19.138.245 LEN=76 TOS=0x00 PREC=0x00 TTL=56 ID=47930 DF PROTO=TCP SPT=443 DPT=42588 WINDOW=20 RES=0x00 ACK PSH URGP=0
2026-07-21T17:28:09.043387-03:00 srv01 kernel: [939315.059934] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=160.79.104.10 DST=177.19.138.245 LEN=76 TOS=0x00 PREC=0x00 TTL=56 ID=16927 DF PROTO=TCP SPT=443 DPT=44364 WINDOW=81 RES=0x00 ACK PSH URGP=0
...
show less
|
Port Scan
|
|
🇩🇪
134.255.255.144
|
|
2026-07-21T16:52:48.372888-03:00 srv1251771 kernel: [154922.629278] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T16:52:48.372888-03:00 srv1251771 kernel: [154922.629278] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=134.255.255.144 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=19183 PROTO=TCP SPT=61000 DPT=5902 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-21T16:53:22.959906-03:00 srv1251771 kernel: [154957.216211] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=134.255.255.144 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=37409 PROTO=TCP SPT=61000 DPT=5942 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-21T16:53:24.018593-03:00 srv1251771 kernel: [154958.274666] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=134.255.255.144 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=43405 PROTO=TCP SPT=61000 DPT=5921 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
172.217.115.4
|
|
2026-07-21T16:49:45.510931-03:00 srv1251771 kernel: [154739.766659] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T16:49:45.510931-03:00 srv1251771 kernel: [154739.766659] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.115.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=45856 WINDOW=0 RES=0x00 RST URGP=0
2026-07-21T16:49:45.714961-03:00 srv1251771 kernel: [154739.971751] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.115.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=45856 WINDOW=0 RES=0x00 RST URGP=0
2026-07-21T16:49:45.924116-03:00 srv1251771 kernel: [154740.179619] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.115.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=45856 WINDOW=0 RES=0x00 RST URGP=0
...
show less
|
Port Scan
|
|
🇩🇪
134.255.255.144
|
|
2026-07-21T15:47:56.696307-03:00 srv1251771 kernel: [151030.963823] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T15:47:56.696307-03:00 srv1251771 kernel: [151030.963823] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=134.255.255.144 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=51294 PROTO=TCP SPT=61000 DPT=5946 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-21T15:48:06.897453-03:00 srv1251771 kernel: [151041.165148] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=134.255.255.144 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=48071 PROTO=TCP SPT=61000 DPT=5979 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-21T15:48:44.028483-03:00 srv1251771 kernel: [151078.296008] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=134.255.255.144 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=36943 PROTO=TCP SPT=61000 DPT=5911 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇩🇪
172.71.164.105
|
|
2026-07-21T15:16:38.263903-03:00 srv1251771 kernel: [149152.534481] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T15:16:38.263903-03:00 srv1251771 kernel: [149152.534481] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.164.105 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=39367 DF PROTO=TCP SPT=11236 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T15:16:39.282919-03:00 srv1251771 kernel: [149153.554388] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.164.105 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=39368 DF PROTO=TCP SPT=11236 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T15:16:40.305744-03:00 srv1251771 kernel: [149154.578001] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.164.105 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=39369 DF PROTO=TCP SPT=11236 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇩🇪
172.71.164.111
|
|
2026-07-21T15:16:34.284947-03:00 srv1251771 kernel: [149148.557334] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T15:16:34.284947-03:00 srv1251771 kernel: [149148.557334] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.164.111 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=47308 DF PROTO=TCP SPT=10950 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T15:16:35.347308-03:00 srv1251771 kernel: [149149.617299] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.164.111 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=47309 DF PROTO=TCP SPT=10950 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T15:16:36.370108-03:00 srv1251771 kernel: [149150.641296] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.164.111 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=47310 DF PROTO=TCP SPT=10950 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇧🇬
162.158.210.30
|
|
2026-07-21T15:16:30.657365-03:00 srv1251771 kernel: [149144.927110] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T15:16:30.657365-03:00 srv1251771 kernel: [149144.927110] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.210.30 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=29455 DF PROTO=TCP SPT=10508 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T15:16:31.688538-03:00 srv1251771 kernel: [149145.960545] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.210.30 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=29456 DF PROTO=TCP SPT=10508 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T15:16:32.713827-03:00 srv1251771 kernel: [149146.985224] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.210.30 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=29457 DF PROTO=TCP SPT=10508 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇧🇬
162.158.210.92
|
|
2026-07-21T15:16:29.356612-03:00 srv1251771 kernel: [149143.628996] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T15:16:29.356612-03:00 srv1251771 kernel: [149143.628996] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.210.92 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=24397 DF PROTO=TCP SPT=11194 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T15:16:30.362930-03:00 srv1251771 kernel: [149144.634221] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.210.92 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=24398 DF PROTO=TCP SPT=11194 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T15:16:31.386687-03:00 srv1251771 kernel: [149145.658070] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.210.92 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=24399 DF PROTO=TCP SPT=11194 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇬🇧
2a0d:3003:b700:110:1c00:fdff:fe00:a43
|
|
CrowdSec local detection on srv01: http-bad-user-agent. Blocked. AS205544 (GB), 2 events.
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.31.38
|
|
2026-07-21T12:18:08.918409-03:00 srv1251771 kernel: [138443.218611] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T12:18:08.918409-03:00 srv1251771 kernel: [138443.218611] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.31.38 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=2184 DF PROTO=TCP SPT=10632 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T12:18:09.924679-03:00 srv1251771 kernel: [138444.224683] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.31.38 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=2185 DF PROTO=TCP SPT=10632 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T12:18:10.948548-03:00 srv1251771 kernel: [138445.248718] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.71.31.38 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=2186 DF PROTO=TCP SPT=10632 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
216.180.246.191
|
|
2026-07-21T12:07:57.057403-03:00 srv01 kernel: [920102.871691] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ...
show more
2026-07-21T12:07:57.057403-03:00 srv01 kernel: [920102.871691] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=216.180.246.191 DST=177.19.138.245 LEN=28 TOS=0x00 PREC=0x00 TTL=57 ID=52871 PROTO=UDP SPT=21187 DPT=80 LEN=8
2026-07-21T12:07:57.752409-03:00 srv01 kernel: [920103.566774] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=216.180.246.191 DST=177.19.138.245 LEN=28 TOS=0x00 PREC=0x00 TTL=57 ID=52871 PROTO=UDP SPT=21187 DPT=80 LEN=8
2026-07-21T12:08:05.764170-03:00 srv01 kernel: [920111.578913] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=216.180.246.191 DST=177.19.138.245 LEN=28 TOS=0x00 PREC=0x00 TTL=57 ID=52871 PROTO=UDP SPT=21187 DPT=80 LEN=8
...
show less
|
Port Scan
|
|
🇧🇷
177.36.203.201
|
|
2026-07-21T10:45:40.864723-03:00 srv1251771 kernel: [132895.177985] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T10:45:40.864723-03:00 srv1251771 kernel: [132895.177985] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=177.36.203.201 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56132 DF PROTO=TCP SPT=46818 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T10:45:48.879024-03:00 srv1251771 kernel: [132903.190153] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=177.36.203.201 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56133 DF PROTO=TCP SPT=46818 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T10:46:04.886432-03:00 srv1251771 kernel: [132919.199865] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=177.36.203.201 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56134 DF PROTO=TCP SPT=46818 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
104.23.245.104
|
|
2026-07-21T09:28:24.657018-03:00 srv1251771 kernel: [128258.982629] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T09:28:24.657018-03:00 srv1251771 kernel: [128258.982629] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.23.245.104 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=30111 DF PROTO=TCP SPT=9834 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T09:28:25.701845-03:00 srv1251771 kernel: [128260.026799] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.23.245.104 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=30112 DF PROTO=TCP SPT=9834 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T09:28:26.724179-03:00 srv1251771 kernel: [128261.049804] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.23.245.104 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=30113 DF PROTO=TCP SPT=9834 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
64.31.55.22
|
|
CrowdSec local detection on srv1251771: http-sensitive-files. Blocked. AS46475 (US), 5 events.
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
45.94.31.117
|
|
CrowdSec local detection on srv1349699: http-bad-user-agent. Blocked. AS210558 (NL), 2 events.
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
185.2.80.253
|
|
2026-07-21T08:13:23.622521-03:00 srv1251771 kernel: [123757.960080] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T08:13:23.622521-03:00 srv1251771 kernel: [123757.960080] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=185.2.80.253 DST=72.61.36.27 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=43376 PROTO=TCP SPT=50099 DPT=2012 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T08:13:30.682693-03:00 srv1251771 kernel: [123765.019988] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=185.2.80.253 DST=72.61.36.27 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=46744 PROTO=TCP SPT=49431 DPT=7000 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T08:13:46.475703-03:00 srv1251771 kernel: [123780.812855] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=185.2.80.253 DST=72.61.36.27 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=35936 PROTO=TCP SPT=42323 DPT=47001 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇨🇭
208.69.78.36
|
|
CrowdSec local detection on srv01: http-cve-2021-41773. Blocked. AS63023 (CH), 1 events.
|
Hacking
Web App Attack
|
|
🇳🇱
185.2.80.252
|
|
2026-07-21T07:43:49.413951-03:00 srv1251771 kernel: [121983.756485] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-21T07:43:49.413951-03:00 srv1251771 kernel: [121983.756485] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=185.2.80.252 DST=72.61.36.27 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=41378 PROTO=TCP SPT=40677 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T07:44:28.321457-03:00 srv1251771 kernel: [122022.662360] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=185.2.80.252 DST=72.61.36.27 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=10934 PROTO=TCP SPT=48311 DPT=3001 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-21T07:44:40.174681-03:00 srv1251771 kernel: [122034.517185] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=185.2.80.252 DST=72.61.36.27 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=39526 PROTO=TCP SPT=52646 DPT=6050 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇫🇷
85.204.70.102
|
|
CrowdSec local detection on srv01: http-probing. Blocked. AS25369 (FR), 11 events.
|
Bad Web Bot
Web App Attack
|
|
🇲🇩
176.123.6.142
|
|
CrowdSec local detection on srv1251771: http-open-proxy. Blocked. AS200019 (MD), 1 events.
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
160.119.76.210
|
|
2026-07-21T06:10:47.911121-03:00 srv01 kernel: [898673.511088] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ...
show more
2026-07-21T06:10:47.911121-03:00 srv01 kernel: [898673.511088] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=160.119.76.210 DST=177.19.138.245 LEN=447 TOS=0x00 PREC=0x00 TTL=49 ID=11385 DF PROTO=UDP SPT=5060 DPT=5060 LEN=427
2026-07-21T06:10:47.916181-03:00 srv01 kernel: [898673.516160] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=160.119.76.210 DST=177.19.138.245 LEN=453 TOS=0x00 PREC=0x00 TTL=49 ID=11386 DF PROTO=UDP SPT=5060 DPT=5160 LEN=433
2026-07-21T06:10:47.921423-03:00 srv01 kernel: [898673.521391] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=160.119.76.210 DST=177.19.138.245 LEN=444 TOS=0x00 PREC=0x00 TTL=49 ID=11389 DF PROTO=UDP SPT=5060 DPT=5061 LEN=424
...
show less
|
Port Scan
|
|
🇸🇬
178.128.22.43
|
|
CrowdSec local detection on srv01: http-cve-probing. Blocked. AS14061 (SG), 1 events.
|
Hacking
Web App Attack
|