🇧🇪
cmbplf
2026-05-20 23:04:50
(2 weeks ago)
9.992 requests from abuseipdb.com blacklisted IP (5mos1w6d)
Brute-Force
Bad Web Bot
🇺🇸
nyt
2026-05-19 19:57:22
(2 weeks ago)
SQL Injection, Web App Attack, suspicious: SQLi (quote probe)
SQL Injection
Web App Attack
🇫🇮
YF
2026-05-03 21:02:00
(1 month ago)
WordPress content enumeration
Web App Attack
🇷🇺
russian-kurort.ru
2026-05-03 15:01:01
(1 month ago)
SYN flood
DDoS Attack
Hacking
2026-05-03 11:28:21
(1 month ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇨🇭
4server
2026-05-03 07:42:28
(1 month ago)
[SunMay0309:42:25.1189632026][security2:error][pid3611197:tid3611743][client135.136.19.219:0]ModSecu ...
show more
[SunMay0309:42:25.1189632026][security2:error][pid3611197:tid3611743][client135.136.19.219:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"verticalti.ch.sarand.ch\"][uri\"/images/favicon.ico\"][unique_id\"afb8YXwjZVR5M16edR4N0gAAAEQ\"]\,referer:https://verticalti.ch.sarand.ch
show less
Hacking
Web App Attack
🇺🇸
Gabriel Camargo
2026-05-03 04:05:40
(1 month ago)
135.136.19.219 - - [02/May/2026:23:05:20 -0500] "GET / HTTP/1.1" 301 178 "http://sergiorsalgado.isis ...
show more
135.136.19.219 - - [02/May/2026:23:05:20 -0500] "GET / HTTP/1.1" 301 178 "http://sergiorsalgado.isismaweb.com" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
135.136.19.219 - - [02/May/2026:23:05:29 -0500] "GET / HTTP/1.1" 301 178 "http://sergiorsalgado.isismaweb.com" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
135.136.19.219 - - [02/May/2026:23:05:39 -0500] "GET / HTTP/1.1" 301 178 "http://sergiorsalgado.isismaweb.com" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
SSH
🇩🇪
grassau.com
2026-05-02 21:29:52
(1 month ago)
*Port Scan* detected from 135.136.19.219 (DE/Germany/Hesse/Frankfurt am Main/-).
Port Scan
🇬🇧
poundawebsiteltd
2026-05-02 19:21:01
(1 month ago)
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 135.136.19.219 - - [02/May/2026: ...
show more
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 135.136.19.219 - - [02/May/2026:20:20:58 +0100] GET / HTTP/1.1 403 2799 https://[REDACTED_DOMAIN] Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
show less
Web App Attack
2026-05-01 21:57:04
(1 month ago)
Fail2ban Nginx log integration.
Brute-Force
SSH
Port Scan
🇺🇸
kuj
2026-05-01 20:40:45
(1 month ago)
2026-05-01T14:40:44.614149-06:00 derp derper[774]: 2026/05/01 14:40:44 http: TLS handshake error fro ...
show more
2026-05-01T14:40:44.614149-06:00 derp derper[774]: 2026/05/01 14:40:44 http: TLS handshake error from 135.136.19.219:45792: tls: client requested unsupported application protocols (["http/0.9" "http/1.0" "spdy/1" "spdy/2" "spdy/3" "h2c" "hq"])
2026-05-01T14:40:44.955643-06:00 derp derper[774]: 2026/05/01 14:40:44 http: TLS handshake error from 135.136.19.219:45796: tls: client requested unsupported application protocols (["hq" "h2c" "spdy/3" "spdy/2" "spdy/1" "http/1.0" "http/0.9"])
2026-05-01T14:40:45.217327-06:00 derp derper[774]: 2026/05/01 14:40:45 http: TLS handshake error from 135.136.19.219:45800: tls: client offered only unsupported versions: [302 301]
...
show less
Port Scan
Brute-Force
🇷🇴
iulianh
2026-05-01 12:55:10
(1 month ago)
*
Brute-Force
SSH
🇫🇷
pm33
2026-05-01 04:02:30
(1 month ago)
Unauthorized connections HTTP 403
Web App Attack
🇺🇸
routerjockey
2026-05-01 02:35:31
(1 month ago)
[sensor1] Observed 28 TCP SYN probes in the past 6 hours [Top ports 80/tcp(21x) 443/tcp(7x)]
Port Scan
🇺🇸
Gabriel Camargo
2026-04-30 04:01:00
(1 month ago)
135.136.19.219 - - [29/Apr/2026:23:00:41 -0500] "GET / HTTP/1.1" 301 178 "http://clinicadeltrabajoip ...
show more
135.136.19.219 - - [29/Apr/2026:23:00:41 -0500] "GET / HTTP/1.1" 301 178 "http://clinicadeltrabajoips.isismaweb.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
135.136.19.219 - - [29/Apr/2026:23:00:50 -0500] "GET / HTTP/1.1" 301 178 "http://clinicadeltrabajoips.isismaweb.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
135.136.19.219 - - [29/Apr/2026:23:01:00 -0500] "GET / HTTP/1.1" 301 178 "http://clinicadeltrabajoips.isismaweb.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
...
show less
Brute-Force
SSH