Anonymous
2026-11-11 21:34:42
UTC ·
(18 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-11-11 20:36:12
UTC ·
(19 hours ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇫🇷
dynamix
2026-11-04 20:11:39
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-15 14:27:13
UTC ·
(4 weeks ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-14 06:03:10
UTC ·
(4 weeks ago)
104.22.24.67 - - [14/Oct/2026:08:03:03 +0200] "GET /web.config.bak HTTP/1.1" 403 124 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
104.22.24.67 - - [14/Oct/2026:08:03:03 +0200] "GET /appsettings.json HTTP/1.1" 404 184 " ...
show more
104.22.24.67 - - [14/Oct/2026:08:03:03 +0200] "GET /web.config.bak HTTP/1.1" 403 124 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
104.22.24.67 - - [14/Oct/2026:08:03:03 +0200] "GET /appsettings.json HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
104.22.24.67 - - [14/Oct/2026:08:03:04 +0200] "GET /appsettings.Development.json HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
104.22.24.67 - - [14/Oct/2026:08:03:04 +0200] "GET /config.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
104.22.24.67 - - [14/Oct/2026:08:03:04 +0200] "GET /config.yml HTTP/1.1" 403 124 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
104.22.24.67 - - [14/Oct/2026:08:03:04 +0200] "GET /config.yaml HTTP/1.1" 403 18
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Jochen Pretli
2026-10-11 02:09:38
UTC ·
(1 month ago)
connection to honeypot
Email Spam
Port Scan
🇫🇷
dynamix
2026-10-09 02:02:53
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-03 12:01:59
UTC ·
(1 month ago)
Web App Attack
Anonymous
2026-09-25 17:11:49
UTC ·
(1 month ago)
(caddyscan) Scanner path probe from 104.22.24.67 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 403 215 104.22.24.67 - - [25/Sep/2026:16:33:58 +0000] "GET /server-status HTTP/1.1 ...
show more
(caddyscan) Scanner path probe from 104.22.24.67 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 403 215 104.22.24.67 - - [25/Sep/2026:16:33:58 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 403 215 104.22.24.67 - - [25/Sep/2026:16:46:23 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 403 215 104.22.24.67 - - [25/Sep/2026:16:47:39 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 403 215 104.22.24.67 - - [25/Sep/2026:16:50:55 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 403 215 104.22.24.67 - - [25/Sep/2026:17:11:47 +0000] "GET /server-status HTTP/1.1"
show less
Port Scan
Anonymous
2026-09-22 20:28:35
UTC ·
(1 month ago)
(caddyscan) Scanner path probe from 104.22.24.67 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 403 215 104.22.24.67 - - [22/Sep/2026:20:08:46 +0000] "GET /server-status HTTP/1.1 ...
show more
(caddyscan) Scanner path probe from 104.22.24.67 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 403 215 104.22.24.67 - - [22/Sep/2026:20:08:46 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 403 215 104.22.24.67 - - [22/Sep/2026:20:08:51 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 403 215 104.22.24.67 - - [22/Sep/2026:20:18:44 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 403 215 104.22.24.67 - - [22/Sep/2026:20:18:47 +0000] "GET /server-status HTTP/1.1"
[REDACTED] 403 215 104.22.24.67 - - [22/Sep/2026:20:28:31 +0000] "GET /server-status HTTP/1.1"
show less
Port Scan
🇯🇵
S.O.B.A. Dev.
2026-09-18 13:05:57
UTC ·
(1 month ago)
Persistent port scanning or vulnerability scanning
Port Scan
Anonymous
2026-09-16 17:24:54
UTC ·
(1 month ago)
104.22.24.67 - - [16/Sep/2026:19:24:50 +0200] "GET /site/.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
104.22.24.67 - - [16/Sep/2026:19:24:51 +0200] ...
show more
104.22.24.67 - - [16/Sep/2026:19:24:50 +0200] "GET /site/.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
104.22.24.67 - - [16/Sep/2026:19:24:51 +0200] "GET /admin/.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
104.22.24.67 - - [16/Sep/2026:19:24:51 +0200] "GET /backend/.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
104.22.24.67 - - [16/Sep/2026:19:24:51 +0200] "GET /server/.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
104.22.24.67 - - [16/Sep/2026:19:24:51 +0200] "GET /src/.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/
...
show less
Bad Web Bot
Web App Attack
🇺🇸
mawan
2026-08-20 14:26:14
UTC ·
(2 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇫🇷
dynamix
2026-08-20 02:50:53
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mawan
2026-08-19 12:17:37
UTC ·
(2 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack