Sustained unwanted traffic against our server 216.238.54.188: 33 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 33 blocked connection attempts across 33 port(s) (main target: 56124, 1 hits). Time window: 2026-10-16T14:56:27 .. 2026-10-18T01:06:17 UTC. Detection: ufw firewall log.
show less
Sustained unwanted traffic against our server 216.238.54.188: 32 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 32 blocked connection attempts across 32 port(s) (main target: 2838, 1 hits). Time window: 2026-10-16T13:53:41 .. 2026-10-18T01:00:58 UTC. Detection: ufw firewall log.
show less
Sustained unwanted traffic against our server 216.238.54.188: 34 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 34 blocked connection attempts across 34 port(s) (main target: 10234, 1 hits). Time window: 2026-10-16T16:34:10 .. 2026-10-18T00:47:12 UTC. Detection: ufw firewall log.
show less
Sustained unwanted traffic against our server 216.238.54.188: 35 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 35 blocked connection attempts across 35 port(s) (main target: 61678, 1 hits). Time window: 2026-10-16T15:14:46 .. 2026-10-18T00:02:01 UTC. Detection: ufw firewall log.
show less
Sustained unwanted traffic against our server 216.238.54.188: 47 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 47 blocked connection attempts across 1 port(s) (main target: -, 0 hits). Detection: ufw firewall log.
show less
Sustained unwanted traffic against our server 216.238.54.188: 20 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 20 blocked connection attempts across 20 port(s) (main target: 14697, 1 hits). Time window: 2026-10-16T14:19:25 .. 2026-10-17T08:44:40 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 5 b ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 5 blocked attempts; 5 blocked attempts total). Time window: 2026-10-17T00:30:40 .. 2026-10-17T07:10:00 UTC. Detection: ufw firewall log.
show less
Sustained unwanted traffic against our server 216.238.54.188: 20 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 20 blocked connection attempts across 20 port(s) (main target: 1010, 1 hits). Time window: 2026-10-16T13:16:43 .. 2026-10-17T06:40:18 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 34567, 5 b ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 34567, 5 blocked attempts; 5 blocked attempts total). Time window: 2026-10-16T13:57:25 .. 2026-10-17T04:40:58 UTC. Detection: ufw firewall log.
show less
Sustained unwanted traffic against our server 216.238.54.188: 21 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 21 blocked connection attempts across 7 port(s) (main target: 30303, 4 hits). Time window: 2026-10-17T01:14:01 .. 2026-10-17T04:47:40 UTC. Detection: ufw firewall log.
show less
Unauthorised use of a private VPN/proxy service hosted on our server 216.238.54.188.
This host obta ...
show moreUnauthorised use of a private VPN/proxy service hosted on our server 216.238.54.188.
This host obtained and used a leaked subscription credential for our hysteria2 proxy
(our subscription endpoint had been left publicly readable, which we have since fixed).
It then ran sustained proxied traffic through our server, repeatedly fetching
live.airnavradar.com at a continuous ~300 kbit/s (observed in packet captures on
2026-10-15 and 2026-10-16 UTC).
After we rotated the credentials and retired the old ports on 2026-10-16 ~12:00 UTC,
this host kept hammering the decommissioned VPN ports: 121+ TCP SYNs to :31000 and
repeated 1288-byte UDP packets to :31001, plus 19+ connect attempts logged between
13:47 and 13:50 UTC. Its client is still retrying in a loop, roughly every 11 seconds.
Evidence retained: firewall logs, nginx access logs, packet captures, traffic counters
and timestamps. Total unauthorised traffic observed: ~15 GB in the days before the cut-off.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 27392, 5 b ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 27392, 5 blocked attempts; 5 blocked attempts total). Time window: 2026-10-16T15:52:17 .. 2026-10-17T02:51:37 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 23, 12 blo ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 23, 12 blocked attempts; 12 blocked attempts total). Time window: 2026-10-16T16:04:27 .. 2026-10-17T00:54:04 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 6 b ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 6 blocked attempts; 7 blocked attempts total). Time window: 2026-10-16T16:26:52 .. 2026-10-16T22:26:26 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 13 ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 13 blocked attempts; 13 blocked attempts total). Time window: 2026-10-16T19:12:02 .. 2026-10-16T23:46:18 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 31003, 5 b ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 31003, 5 blocked attempts; 5 blocked attempts total). Time window: 2026-10-16T14:47:25 .. 2026-10-16T19:47:17 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 443, 8 blo ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 443, 8 blocked attempts; 8 blocked attempts total). Time window: 2026-10-16T19:01:18 .. 2026-10-16T19:02:18 UTC. Detection: ufw firewall log.
show less
Sustained unwanted traffic against our server 216.238.54.188: 20 blocked connection attempts across ...
show moreSustained unwanted traffic against our server 216.238.54.188: 20 blocked connection attempts across 20 port(s) (main target: 58266, 1 hits). Time window: 2026-10-16T13:39:43 .. 2026-10-16T17:57:31 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 7 b ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 7 blocked attempts; 7 blocked attempts total). Time window: 2026-10-16T13:50:10 .. 2026-10-16T17:00:10 UTC. Detection: ufw firewall log.
show less
Repeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 10 ...
show moreRepeated connection attempts against one specific port of our server 216.238.54.188 (port 31001, 10 blocked attempts; 12 blocked attempts total). Time window: 2026-10-16T14:01:48 .. 2026-10-16T14:58:24 UTC. Detection: ufw firewall log.
show less
Port Scan
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.