🇩🇪
abdubhai
2026-05-23 21:04:42
(1 week ago)
104.22.105.56 - - [24/May/2026:0
...
Brute-Force
🇩🇪
ghostwarriors
2026-05-22 16:20:42
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2026-05-20 13:13:59
(2 weeks ago)
104.22.105.56 - - [20/May/2026:1
...
Brute-Force
🇩🇪
abdubhai
2026-05-15 10:59:18
(2 weeks ago)
104.22.105.56 - - [15/May/2026:1
...
Brute-Force
🇺🇸
TPI-Abuse
2026-05-15 10:27:12
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 104.22.105.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 104.22.105.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:27:02.213364 2026] [security2:error] [pid 20335:tid 20335] [client 104.22.105.56:9673] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||abq4you.com.peterlundman.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "abq4you.com.peterlundman.com"] [uri "/db_backup.sql"] [unique_id "agb09hEL7_B9Z4g9U9P3GAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-14 22:05:17
(3 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-13.
show less
Web App Attack
SSH
Hacking
🇩🇪
abdubhai
2026-05-14 14:23:03
(3 weeks ago)
104.22.105.56 - - [14/May/2026:1
...
Brute-Force
2026-05-14 05:02:07
(3 weeks ago)
(caddyscan) Scanner path probe from 104.22.105.56 (US/United States/-): 5 in the last 3600 secs; Por ...
show more
(caddyscan) Scanner path probe from 104.22.105.56 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:04:23:11 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:04:33:51 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:04:44:17 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:05:01:31 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:05:01:31 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
2026-05-14 04:10:25
(3 weeks ago)
(caddyscan) Scanner path probe from 104.22.105.56 (US/United States/-): 5 in the last 3600 secs; Por ...
show more
(caddyscan) Scanner path probe from 104.22.105.56 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:04:06:06 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:04:08:24 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:04:08:49 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:04:09:23 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:04:10:19 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
2026-05-14 03:01:02
(3 weeks ago)
(caddyscan) Scanner path probe from 104.22.105.56 (US/United States/-): 5 in the last 3600 secs; Por ...
show more
(caddyscan) Scanner path probe from 104.22.105.56 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:02:05:58 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:02:07:52 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:02:50:00 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:02:50:03 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.105.56 - - [14/May/2026:03:00:58 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
🇩🇪
abdubhai
2026-05-13 13:55:18
(3 weeks ago)
104.22.105.56 - - [13/May/2026:1
...
Brute-Force
🇩🇪
ghostwarriors
2026-05-13 03:20:42
(3 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-05-11 14:43:41
(3 weeks ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇩🇪
abdubhai
2026-05-10 05:29:18
(3 weeks ago)
104.22.105.56 - - [10/May/2026:1
...
Brute-Force
🇺🇸
TPI-Abuse
2026-05-09 14:52:24
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.22.105.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.105.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 10:52:20.889077 2026] [security2:error] [pid 5561:tid 5561] [client 104.22.105.56:13811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sykesclan.com"] [uri "/.git/config"] [unique_id "af9KJMTiz-TJh0mnGA5_XQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack