|
🇩🇪
159.100.6.78
|
|
2026-07-23T04:34:13.810710-03:00 srv1251771 kernel: [283407.727426] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-23T04:34:13.810710-03:00 srv1251771 kernel: [283407.727426] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=159.100.6.78 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=13054 PROTO=TCP SPT=8484 DPT=39281 WINDOW=16384 RES=0x00 ACK URGP=0
2026-07-23T04:34:18.425032-03:00 srv1251771 kernel: [283412.341656] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=159.100.6.78 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=42692 PROTO=TCP SPT=8484 DPT=53266 WINDOW=16384 RES=0x00 ACK URGP=0
2026-07-23T04:35:09.572927-03:00 srv1251771 kernel: [283463.489076] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=159.100.6.78 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=39507 PROTO=TCP SPT=8484 DPT=42925 WINDOW=16384 RES=0x00 ACK URGP=0
...
show less
|
Port Scan
|
|
🇯🇵
172.70.49.37
|
|
2026-07-23T03:24:13.425134-03:00 srv1251771 kernel: [279207.352678] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-23T03:24:13.425134-03:00 srv1251771 kernel: [279207.352678] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.70.49.37 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=53050 DF PROTO=TCP SPT=11537 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-23T03:24:14.469188-03:00 srv1251771 kernel: [279208.396653] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.70.49.37 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=53051 DF PROTO=TCP SPT=11537 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-23T03:24:15.492222-03:00 srv1251771 kernel: [279209.419671] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.70.49.37 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=53052 DF PROTO=TCP SPT=11537 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇯🇵
162.158.119.235
|
|
2026-07-23T03:24:12.726683-03:00 srv1251771 kernel: [279206.654133] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-23T03:24:12.726683-03:00 srv1251771 kernel: [279206.654133] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.119.235 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=25463 DF PROTO=TCP SPT=14163 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-23T03:24:13.765248-03:00 srv1251771 kernel: [279207.692821] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.119.235 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=25464 DF PROTO=TCP SPT=14163 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-23T03:24:14.789723-03:00 srv1251771 kernel: [279208.716703] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=162.158.119.235 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=25465 DF PROTO=TCP SPT=14163 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇫🇮
83.97.78.224
|
|
CrowdSec local detection on srv01: http-cve-2021-41773. Blocked. AS0 (GB), 1 events.
|
Hacking
Web App Attack
|
|
🇧🇪
34.78.43.77
|
|
2026-07-23T01:42:14.422859-03:00 srv1251771 kernel: [273088.366990] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-23T01:42:14.422859-03:00 srv1251771 kernel: [273088.366990] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.78.43.77 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=48022 PROTO=TCP SPT=52368 DPT=389 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-23T01:42:15.789018-03:00 srv1251771 kernel: [273089.733100] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.78.43.77 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=48022 PROTO=TCP SPT=52368 DPT=389 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-23T01:42:17.163975-03:00 srv1251771 kernel: [273091.108140] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.78.43.77 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=26104 PROTO=TCP SPT=52384 DPT=389 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇧🇪
104.199.54.48
|
|
2026-07-23T00:51:52.749900-03:00 srv1251771 kernel: [270066.701221] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-23T00:51:52.749900-03:00 srv1251771 kernel: [270066.701221] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.199.54.48 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=39208 PROTO=TCP SPT=52256 DPT=110 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-23T00:51:54.113399-03:00 srv1251771 kernel: [270068.062964] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.199.54.48 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=26541 PROTO=TCP SPT=52272 DPT=110 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-23T00:51:55.474056-03:00 srv1251771 kernel: [270069.425361] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.199.54.48 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=39208 PROTO=TCP SPT=52256 DPT=110 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇫🇷
62.210.142.161
|
|
CrowdSec local detection on srv1251771: http-probing. Blocked. AS12876 (FR), 11 events.
|
Bad Web Bot
Web App Attack
|
|
🇧🇷
201.131.161.10
|
|
2026-07-23T00:37:14.364828-03:00 srv1251771 kernel: [269188.317811] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-23T00:37:14.364828-03:00 srv1251771 kernel: [269188.317811] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=201.131.161.10 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=276 DF PROTO=TCP SPT=31294 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-23T00:37:15.364238-03:00 srv1251771 kernel: [269189.316618] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=201.131.161.10 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=277 DF PROTO=TCP SPT=31294 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-23T00:37:17.362676-03:00 srv1251771 kernel: [269191.315695] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=201.131.161.10 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=278 DF PROTO=TCP SPT=31294 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇧🇷
177.22.174.121
|
|
2026-07-22T23:46:20.930841-03:00 srv1251771 kernel: [266134.891512] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-22T23:46:20.930841-03:00 srv1251771 kernel: [266134.891512] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=177.22.174.121 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=331 DF PROTO=TCP SPT=25198 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-22T23:46:21.926142-03:00 srv1251771 kernel: [266135.886647] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=177.22.174.121 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=332 DF PROTO=TCP SPT=25198 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-22T23:46:23.926699-03:00 srv1251771 kernel: [266137.887377] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=177.22.174.121 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=333 DF PROTO=TCP SPT=25198 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇧🇪
34.38.6.159
|
|
2026-07-22T23:08:49.704549-03:00 srv1251771 kernel: [263883.673368] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-22T23:08:49.704549-03:00 srv1251771 kernel: [263883.673368] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.38.6.159 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=37843 PROTO=TCP SPT=52381 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-22T23:08:52.431673-03:00 srv1251771 kernel: [263886.400478] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.38.6.159 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=53489 PROTO=TCP SPT=52365 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-22T23:08:53.710882-03:00 srv1251771 kernel: [263887.678877] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.38.6.159 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=37843 PROTO=TCP SPT=52381 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇧🇪
34.78.147.255
|
|
2026-07-22T23:04:50.636684-03:00 srv1251771 kernel: [263644.605393] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-22T23:04:50.636684-03:00 srv1251771 kernel: [263644.605393] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.78.147.255 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=53720 PROTO=TCP SPT=52255 DPT=3306 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-22T23:04:51.591015-03:00 srv1251771 kernel: [263645.560204] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.78.147.255 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=53720 PROTO=TCP SPT=52255 DPT=3306 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-22T23:04:52.578020-03:00 srv1251771 kernel: [263646.547030] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=34.78.147.255 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=53720 PROTO=TCP SPT=52255 DPT=3306 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇬🇧
195.96.139.90
|
|
2026-07-22T22:50:19.621175-03:00 srv01 kernel: [1045046.596354] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:4 ...
show more
2026-07-22T22:50:19.621175-03:00 srv01 kernel: [1045046.596354] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=195.96.139.90 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=17515 DPT=443 LEN=1208
2026-07-22T22:50:19.821177-03:00 srv01 kernel: [1045046.796365] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=195.96.139.90 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=17515 DPT=443 LEN=1208
2026-07-22T22:50:19.821316-03:00 srv01 kernel: [1045046.796437] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=195.96.139.90 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=17515 DPT=443 LEN=1208
...
show less
|
Port Scan
|
|
🇬🇧
185.247.137.80
|
|
2026-07-22T22:49:03.420686-03:00 srv01 kernel: [1044970.395139] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:4 ...
show more
2026-07-22T22:49:03.420686-03:00 srv01 kernel: [1044970.395139] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=185.247.137.80 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=15937 DPT=443 LEN=1208
2026-07-22T22:49:03.620611-03:00 srv01 kernel: [1044970.595053] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=185.247.137.80 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=15937 DPT=443 LEN=1208
2026-07-22T22:49:03.620767-03:00 srv01 kernel: [1044970.595121] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=185.247.137.80 DST=177.19.138.245 LEN=1228 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=15937 DPT=443 LEN=1208
...
show less
|
Port Scan
|
|
🇺🇸
104.23.160.205
|
|
2026-07-22T22:35:38.491931-03:00 srv1251771 kernel: [261892.464568] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-22T22:35:38.491931-03:00 srv1251771 kernel: [261892.464568] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.23.160.205 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=63354 DF PROTO=TCP SPT=11115 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-22T22:35:39.513240-03:00 srv1251771 kernel: [261893.486781] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.23.160.205 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=63355 DF PROTO=TCP SPT=11115 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-22T22:35:40.537694-03:00 srv1251771 kernel: [261894.511063] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=104.23.160.205 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=63356 DF PROTO=TCP SPT=11115 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇩🇪
93.152.221.118
|
|
CrowdSec local detection on srv01: http-cve-probing. Blocked. AS0 (BG), 1 events.
|
Hacking
Web App Attack
|
|
🇺🇸
172.68.175.102
|
|
2026-07-22T21:04:14.915688-03:00 srv1251771 kernel: [256408.902579] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-22T21:04:14.915688-03:00 srv1251771 kernel: [256408.902579] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.68.175.102 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19475 DF PROTO=TCP SPT=11290 DPT=2083 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-22T21:04:15.943173-03:00 srv1251771 kernel: [256409.930678] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.68.175.102 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19476 DF PROTO=TCP SPT=11290 DPT=2083 WINDOW=65535 RES=0x00 SYN URGP=0
2026-07-22T21:04:16.966567-03:00 srv1251771 kernel: [256410.954046] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.68.175.102 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19477 DF PROTO=TCP SPT=11290 DPT=2083 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇫🇷
185.177.72.13
|
|
CrowdSec local detection on srv1251771: CVE-2017-9841. Blocked. AS211590 (FR), 1 events.
|
Hacking
Web App Attack
|
|
🇧🇷
200.219.133.192
|
|
2026-07-22T18:19:51.922918-03:00 srv01 kernel: [1028818.757958] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:4 ...
show more
2026-07-22T18:19:51.922918-03:00 srv01 kernel: [1028818.757958] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=200.219.133.192 DST=177.19.138.245 LEN=1500 TOS=0x00 PREC=0x00 TTL=53 ID=29025 DF PROTO=TCP SPT=443 DPT=38490 WINDOW=501 RES=0x00 ACK PSH URGP=0
2026-07-22T18:19:52.215399-03:00 srv01 kernel: [1028819.049662] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=200.219.133.192 DST=177.19.138.245 LEN=1500 TOS=0x00 PREC=0x00 TTL=53 ID=29026 DF PROTO=TCP SPT=443 DPT=38490 WINDOW=501 RES=0x00 ACK PSH URGP=0
2026-07-22T18:19:52.754634-03:00 srv01 kernel: [1028819.589656] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=200.219.133.192 DST=177.19.138.245 LEN=1500 TOS=0x00 PREC=0x00 TTL=53 ID=29027 DF PROTO=TCP SPT=443 DPT=38490 WINDOW=501 RES=0x00 ACK PSH URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
100.29.192.100
|
|
2026-07-22T17:02:53.029747-03:00 srv01 kernel: [1024199.819612] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:4 ...
show more
2026-07-22T17:02:53.029747-03:00 srv01 kernel: [1024199.819612] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=100.29.192.100 DST=177.19.138.245 LEN=71 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=65413 DPT=161 LEN=51
2026-07-22T17:02:53.029953-03:00 srv01 kernel: [1024199.819688] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=100.29.192.100 DST=177.19.138.245 LEN=68 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=65413 DPT=161 LEN=48
2026-07-22T17:02:53.029989-03:00 srv01 kernel: [1024199.819705] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=100.29.192.100 DST=177.19.138.245 LEN=88 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=65413 DPT=161 LEN=68
...
show less
|
Port Scan
|
|
🇫🇷
169.58.39.117
|
|
CrowdSec local detection on srv01: http-bad-user-agent. Blocked. AS0 (DE), 2 events.
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
104.248.85.188
|
|
2026-07-22T16:33:43.338385-03:00 srv01 kernel: [1022450.110789] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:4 ...
show more
2026-07-22T16:33:43.338385-03:00 srv01 kernel: [1022450.110789] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=104.248.85.188 DST=177.19.138.245 LEN=42 TOS=0x00 PREC=0x00 TTL=46 ID=31555 DF PROTO=UDP SPT=55601 DPT=1194 LEN=22
2026-07-22T16:34:30.845762-03:00 srv01 kernel: [1022497.618611] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=104.248.85.188 DST=177.19.138.245 LEN=42 TOS=0x00 PREC=0x00 TTL=46 ID=1077 DF PROTO=UDP SPT=40651 DPT=9201 LEN=22
2026-07-22T16:34:46.820515-03:00 srv01 kernel: [1022513.593530] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=104.248.85.188 DST=177.19.138.245 LEN=42 TOS=0x00 PREC=0x00 TTL=46 ID=36264 DF PROTO=UDP SPT=43486 DPT=8080 LEN=22
...
show less
|
Port Scan
|
|
🇺🇸
172.217.114.4
|
|
2026-07-22T16:29:37.042928-03:00 srv1251771 kernel: [239931.073740] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-22T16:29:37.042928-03:00 srv1251771 kernel: [239931.073740] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.114.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=55124 WINDOW=0 RES=0x00 RST URGP=0
2026-07-22T16:29:37.247220-03:00 srv1251771 kernel: [239931.279133] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.114.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=55124 WINDOW=0 RES=0x00 RST URGP=0
2026-07-22T16:29:37.451270-03:00 srv1251771 kernel: [239931.483742] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.114.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=55124 WINDOW=0 RES=0x00 RST URGP=0
...
show less
|
Port Scan
|
|
🇳🇱
195.178.110.104
|
|
CrowdSec local detection on srv01: http-path-traversal-probing. Blocked. AS48090 (BG), 4 events.
|
Hacking
Web App Attack
|
|
🇺🇸
2607:8500:faca:de::105
|
|
2026-07-22T16:17:55.665354-03:00 srv1251771 kernel: [239229.699282] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-22T16:17:55.665354-03:00 srv1251771 kernel: [239229.699282] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0105 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=95437 PROTO=TCP SPT=59014 DPT=554 WINDOW=28800 RES=0x00 SYN URGP=0
2026-07-22T16:17:55.665578-03:00 srv1251771 kernel: [239229.699288] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0105 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=105257 PROTO=TCP SPT=48298 DPT=1025 WINDOW=28800 RES=0x00 SYN URGP=0
2026-07-22T16:17:55.666904-03:00 srv1251771 kernel: [239229.699481] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2607:8500:faca:00de:0000:0000:0000:0105 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=80 TC=0 HOPLIMIT=53 FLOWLBL=789471 PROTO=TCP SPT=60672 DPT=113 WINDOW=28800 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
172.217.113.4
|
|
2026-07-22T16:13:00.023089-03:00 srv1251771 kernel: [238934.057943] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-22T16:13:00.023089-03:00 srv1251771 kernel: [238934.057943] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.113.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=59660 WINDOW=0 RES=0x00 RST URGP=0
2026-07-22T16:13:00.230818-03:00 srv1251771 kernel: [238934.265565] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.113.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=59660 WINDOW=0 RES=0x00 RST URGP=0
2026-07-22T16:13:00.456936-03:00 srv1251771 kernel: [238934.481417] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=172.217.113.4 DST=72.61.36.27 LEN=40 TOS=0x00 PREC=0x60 TTL=121 ID=0 DF PROTO=TCP SPT=443 DPT=59660 WINDOW=0 RES=0x00 RST URGP=0
...
show less
|
Port Scan
|