|
🇩🇪
93.152.221.13
|
|
CrowdSec local detection on srv1349699: http-sensitive-files. Blocked. AS0 (BG), 5 events.
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
45.153.34.182
|
|
CrowdSec local detection on srv1349699: http-sensitive-files. Blocked. AS51396 (NL), 5 events.
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
164.92.244.132
|
|
CrowdSec local detection on srv01: jira_cve-2021-26086. Blocked. AS14061 (DE), 1 events.
|
Hacking
Web App Attack
|
|
🇺🇸
216.180.246.202
|
|
2026-07-19T22:53:21.552380-03:00 srv01 kernel: [786026.069743] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ...
show more
2026-07-19T22:53:21.552380-03:00 srv01 kernel: [786026.069743] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=216.180.246.202 DST=177.19.138.245 LEN=59 TOS=0x00 PREC=0x00 TTL=57 ID=36831 PROTO=UDP SPT=21536 DPT=53 LEN=39
2026-07-19T22:53:21.876400-03:00 srv01 kernel: [786026.393343] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=216.180.246.202 DST=177.19.138.245 LEN=59 TOS=0x00 PREC=0x00 TTL=57 ID=36831 PROTO=UDP SPT=21536 DPT=53 LEN=39
2026-07-19T22:53:25.484589-03:00 srv01 kernel: [786030.002008] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=216.180.246.202 DST=177.19.138.245 LEN=59 TOS=0x00 PREC=0x00 TTL=57 ID=36831 PROTO=UDP SPT=21536 DPT=53 LEN=39
...
show less
|
Port Scan
|
|
🇺🇸
69.167.30.16
|
|
2026-07-19T22:00:54.322098-03:00 srv1251771 kernel: [ 608.979700] [UFW BLOCK] IN=eth0 OUT= MAC=40:e ...
show more
2026-07-19T22:00:54.322098-03:00 srv1251771 kernel: [ 608.979700] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=69.167.30.16 DST=72.61.36.27 LEN=52 TOS=0x08 PREC=0x20 TTL=104 ID=10265 DF PROTO=TCP SPT=55489 DPT=2086 WINDOW=64860 RES=0x00 CWR ECE SYN URGP=0
2026-07-19T22:00:55.321262-03:00 srv1251771 kernel: [ 609.979114] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=69.167.30.16 DST=72.61.36.27 LEN=52 TOS=0x08 PREC=0x20 TTL=104 ID=10266 DF PROTO=TCP SPT=55489 DPT=2086 WINDOW=64860 RES=0x00 CWR ECE SYN URGP=0
2026-07-19T22:00:57.324803-03:00 srv1251771 kernel: [ 611.982310] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=69.167.30.16 DST=72.61.36.27 LEN=52 TOS=0x08 PREC=0x20 TTL=104 ID=10267 DF PROTO=TCP SPT=55489 DPT=2086 WINDOW=64860 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇵🇰
153.117.40.210
|
|
2026-07-19T21:15:38.272750-03:00 srv1251771 kernel: [735299.228214] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-19T21:15:38.272750-03:00 srv1251771 kernel: [735299.228214] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=153.117.40.210 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=32049 DF PROTO=TCP SPT=35560 DPT=8181 WINDOW=29040 RES=0x00 SYN URGP=0
2026-07-19T21:15:39.271413-03:00 srv1251771 kernel: [735300.227803] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=153.117.40.210 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=32050 DF PROTO=TCP SPT=35560 DPT=8181 WINDOW=29040 RES=0x00 SYN URGP=0
2026-07-19T21:15:41.271731-03:00 srv1251771 kernel: [735302.228119] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=153.117.40.210 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=32051 DF PROTO=TCP SPT=35560 DPT=8181 WINDOW=29040 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇳🇱
45.156.128.176
|
|
CrowdSec local detection on srv1251771: CVE-2019-18935. Blocked. AS211680 (PT), 1 events.
|
Hacking
Web App Attack
|
|
🇮🇷
77.104.95.3
|
|
2026-07-19T19:02:22.000915-03:00 srv1251771 kernel: [727302.980934] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-19T19:02:22.000915-03:00 srv1251771 kernel: [727302.980934] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=77.104.95.3 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=42970 PROTO=TCP SPT=61000 DPT=5938 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-19T19:02:41.922388-03:00 srv1251771 kernel: [727322.901926] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=77.104.95.3 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=15749 PROTO=TCP SPT=61000 DPT=5990 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-19T19:02:49.403408-03:00 srv1251771 kernel: [727330.382590] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=77.104.95.3 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=32047 PROTO=TCP SPT=61000 DPT=5908 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇨🇭
194.191.26.234
|
|
CrowdSec local detection on srv1251771: http-cve-2021-42013. Blocked. AS1836 (CH), 1 events.
|
Hacking
Web App Attack
|
|
🇭🇰
103.56.114.108
|
|
CrowdSec local detection on srv01: http-cve-2021-42013. Blocked. AS55933 (HK), 1 events.
|
Hacking
Web App Attack
|
|
🇧🇷
200.255.205.162
|
|
CrowdSec local detection on srv1251771: http-cve-2021-42013. Blocked. AS4230 (BR), 1 events.
|
Hacking
Web App Attack
|
|
🇺🇸
2001:4860:4802:34::223
|
|
2026-07-19T16:11:23.157017-03:00 srv1251771 kernel: [717044.160301] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-19T16:11:23.157017-03:00 srv1251771 kernel: [717044.160301] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4802:0034:0000:0000:0000:0223 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=1280 TC=0 HOPLIMIT=120 FLOWLBL=183615 PROTO=TCP SPT=443 DPT=47246 WINDOW=462 RES=0x00 ACK PSH URGP=0
2026-07-19T16:11:23.157715-03:00 srv1251771 kernel: [717044.161310] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4802:0034:0000:0000:0000:0223 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=702 TC=0 HOPLIMIT=120 FLOWLBL=183615 PROTO=TCP SPT=443 DPT=47246 WINDOW=462 RES=0x00 ACK PSH URGP=0
2026-07-19T16:11:23.157756-03:00 srv1251771 kernel: [717044.161336] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4802:0034:0000:0000:0000:0223 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=120 FLOWLBL=183615 PROTO=TCP SPT=443 DPT=47246 WINDOW=462 RES=0x00 ACK FIN URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
45.156.129.176
|
|
CrowdSec local detection on srv01: CVE-2019-18935. Blocked. AS211680 (PT), 1 events.
|
Hacking
Web App Attack
|
|
🇧🇷
45.186.86.105
|
|
CrowdSec local detection on srv01: http-generic-403-bf. Blocked. AS269430 (BR), 24 events.
|
Brute-Force
Web App Attack
|
|
🇺🇸
2001:4860:4827:7700::
|
|
2026-07-19T15:18:14.414765-03:00 srv1251771 kernel: [713855.426193] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-19T15:18:14.414765-03:00 srv1251771 kernel: [713855.426193] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4827:7700:0000:0000:0000:0000 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=145 TC=128 HOPLIMIT=121 FLOWLBL=400064 PROTO=TCP SPT=443 DPT=52496 WINDOW=1047 RES=0x00 ACK PSH URGP=0
2026-07-19T15:18:14.625096-03:00 srv1251771 kernel: [713855.637553] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4827:7700:0000:0000:0000:0000 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=145 TC=128 HOPLIMIT=121 FLOWLBL=400064 PROTO=TCP SPT=443 DPT=52496 WINDOW=1047 RES=0x00 ACK PSH URGP=0
2026-07-19T15:18:14.841231-03:00 srv1251771 kernel: [713855.853478] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4827:7700:0000:0000:0000:0000 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=145 TC=128 HOPLIMIT=121 FLOWLBL=315660 PROTO=TCP SPT=443 DPT=52496 WINDOW=1047 RES=0x00 ACK PSH URG
...
show less
|
Port Scan
|
|
🇩🇪
216.144.249.201
|
|
CrowdSec local detection on srv1349699: http-crawl-non_statics. Blocked. AS46475 (DE), 46 events.
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
45.45.237.192
|
|
CrowdSec local detection on srv1349699: http-crawl-non_statics. Blocked. AS400529 (US), 42 events.
|
Bad Web Bot
Web App Attack
|
|
🇫🇮
45.154.244.222
|
|
2026-07-19T14:34:08.577762-03:00 srv1251771 kernel: [711209.597817] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-19T14:34:08.577762-03:00 srv1251771 kernel: [711209.597817] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=45.154.244.222 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=4047 PROTO=TCP SPT=57071 DPT=3376 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-19T14:34:25.437099-03:00 srv1251771 kernel: [711226.457096] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=45.154.244.222 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=3177 PROTO=TCP SPT=57087 DPT=3374 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-19T14:34:34.276406-03:00 srv1251771 kernel: [711235.296298] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=45.154.244.222 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=54330 PROTO=TCP SPT=57071 DPT=3304 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇺🇸
45.45.237.176
|
|
CrowdSec local detection on srv1349699: http-bad-user-agent. Blocked. AS400529 (US), 2 events.
|
Bad Web Bot
Web App Attack
|
|
🇫🇮
45.154.244.222
|
|
2026-07-19T13:17:28.818913-03:00 srv1251771 kernel: [706609.851314] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-19T13:17:28.818913-03:00 srv1251771 kernel: [706609.851314] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=45.154.244.222 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=8297 PROTO=TCP SPT=57071 DPT=3354 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-19T13:17:31.053905-03:00 srv1251771 kernel: [706612.086319] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=45.154.244.222 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=48422 PROTO=TCP SPT=57087 DPT=3355 WINDOW=1025 RES=0x00 SYN URGP=0
2026-07-19T13:17:52.048835-03:00 srv1251771 kernel: [706633.081184] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=45.154.244.222 DST=72.61.36.27 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=28207 PROTO=TCP SPT=57071 DPT=3300 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇩🇪
130.12.182.134
|
|
2026-07-19T11:04:50.291874-03:00 srv01 kernel: [743514.425986] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ...
show more
2026-07-19T11:04:50.291874-03:00 srv01 kernel: [743514.425986] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=130.12.182.134 DST=177.19.138.245 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=44916 PROTO=TCP SPT=49787 DPT=7427 WINDOW=1200 RES=0x00 RST URGP=0
2026-07-19T11:04:55.453673-03:00 srv01 kernel: [743519.587838] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=130.12.182.134 DST=177.19.138.245 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=30665 PROTO=TCP SPT=49803 DPT=3711 WINDOW=1200 RES=0x00 RST URGP=0
2026-07-19T11:04:56.567612-03:00 srv01 kernel: [743520.701785] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=130.12.182.134 DST=177.19.138.245 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=54914 PROTO=TCP SPT=49803 DPT=1572 WINDOW=1200 RES=0x00 RST URGP=0
...
show less
|
Port Scan
|
|
🇳🇱
195.178.110.223
|
|
CrowdSec local detection on srv01: http-probing. Blocked. AS48090 (BG), 11 events.
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
2001:4860:4802:36::223
|
|
2026-07-19T04:08:26.512789-03:00 srv1251771 kernel: [673667.630001] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-19T04:08:26.512789-03:00 srv1251771 kernel: [673667.630001] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4802:0036:0000:0000:0000:0223 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=1229 TC=0 HOPLIMIT=120 FLOWLBL=374207 PROTO=TCP SPT=443 DPT=41942 WINDOW=13436 RES=0x00 ACK PSH URGP=0
2026-07-19T04:08:53.648521-03:00 srv1251771 kernel: [673694.766008] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4802:0036:0000:0000:0000:0223 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=1229 TC=0 HOPLIMIT=120 FLOWLBL=382742 PROTO=TCP SPT=443 DPT=41942 WINDOW=13436 RES=0x00 ACK PSH URGP=0
2026-07-19T04:09:23.858079-03:00 srv1251771 kernel: [673724.973530] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4802:0036:0000:0000:0000:0223 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=1229 TC=64 HOPLIMIT=121 FLOWLBL=781894 PROTO=TCP SPT=443 DPT=41942 WINDOW=13436 RES=0x00 ACK PSH UR
...
show less
|
Port Scan
|
|
🇺🇸
2001:4860:4845:400::
|
|
2026-07-19T04:06:23.726686-03:00 srv1251771 kernel: [673544.844005] [UFW BLOCK] IN=eth0 OUT= MAC=40: ...
show more
2026-07-19T04:06:23.726686-03:00 srv1251771 kernel: [673544.844005] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4845:0400:0000:0000:0000:0000 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=1230 TC=64 HOPLIMIT=121 FLOWLBL=409713 PROTO=TCP SPT=443 DPT=37200 WINDOW=16075 RES=0x00 ACK PSH URGP=0
2026-07-19T04:06:50.350602-03:00 srv1251771 kernel: [673571.467693] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4845:0400:0000:0000:0000:0000 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=1230 TC=64 HOPLIMIT=121 FLOWLBL=571691 PROTO=TCP SPT=443 DPT=37200 WINDOW=16075 RES=0x00 ACK PSH URGP=0
2026-07-19T04:07:20.557980-03:00 srv1251771 kernel: [673601.675666] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:86:dd SRC=2001:4860:4845:0400:0000:0000:0000:0000 DST=2a02:4780:0066:62cb:0000:0000:0000:0001 LEN=1230 TC=64 HOPLIMIT=121 FLOWLBL=556014 PROTO=TCP SPT=443 DPT=37200 WINDOW=16075 RES=0x00 ACK PSH
...
show less
|
Port Scan
|
|
🇳🇱
81.171.72.135
|
|
CrowdSec local detection on srv1349699: http-probing. Blocked. AS34343 (FR), 11 events.
|
Bad Web Bot
Web App Attack
|