🇩🇪
Alfafoxtrot
2026-06-05 06:40:48
(8 hours ago)
Reason: suspicious | src-ip: 135.232.201.234 | dport=80 | Protoc.=TCP | Inc. 2d: 1
Hacking
🇩🇪
Alfafoxtrot
2026-06-04 06:37:39
(1 day ago)
Reason: suspicious | src-ip: 135.232.201.234 | dport=80 | Protoc.=TCP | Inc. 2d: 1
Hacking
2026-06-03 10:03:52
(2 days ago)
PORT & IP Scan.
Port Scan
Brute-Force
🇬🇧
Aetherweb Ark
2026-06-03 08:08:55
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 135.232.201.234 (US/United States/-): N in the ...
show more
(mod_security) mod_security (id:949110) triggered by 135.232.201.234 (US/United States/-): N in the last X secs
show less
Web App Attack
2026-06-03 07:49:21
(2 days ago)
Web Attack ENV File Scanning Attempt
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 06:53:08
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 135.232.201.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 135.232.201.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 02:53:03.308879 2026] [security2:error] [pid 25482:tid 25482] [client 135.232.201.234:29962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.65"] [uri "/.git/HEAD"] [unique_id "ah_PT4neJcjZUlhQxRBfDwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Roper123
2026-06-03 06:39:49
(2 days ago)
Web exploits
Web App Attack
🇩🇪
Alfafoxtrot
2026-06-03 06:31:29
(2 days ago)
Reason: suspicious | src-ip: 135.232.201.234 | dport=80 | Protoc.=TCP | Inc. 2d: 1
Hacking
🇺🇸
TPI-Abuse
2026-06-03 05:52:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 135.232.201.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 135.232.201.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:52:40.377731 2026] [security2:error] [pid 30238:tid 30238] [client 135.232.201.234:1519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.53"] [uri "/.git/HEAD"] [unique_id "ah_BKLv4wWqKd2JTS90GkQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-03 05:42:11
(2 days ago)
Host header is a numeric IP address. Pattern match "^ (920350-135)
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-03 05:30:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 135.232.201.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 135.232.201.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:30:50.337453 2026] [security2:error] [pid 15328:tid 15354] [client 135.232.201.234:3016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.201"] [uri "/.env.local"] [unique_id "ah-8Cv4CjKzREAGvLKjUCgAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-03 05:22:59
(2 days ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇺🇸
itsnixk
2026-06-03 05:05:46
(2 days ago)
(mod_security) mod_security (id:920350) triggered by 135.232.201.234 (US/United States/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 135.232.201.234 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 03 01:05:43.523022 2026] [security2:error] [pid 1316994:tid 1317475] [client 135.232.201.234:1495] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "774"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.25.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.git/HEAD"] [unique_id "ah-2Jwzvg3uGSv7kHwZsYAAAAKk"]
show less
Port Scan
🇩🇪
EGP Abuse Dept
2026-06-03 05:01:39
(2 days ago)
Scanning for web/db/file exploits on tpc-021.mach3builders.nl
SQL Injection
Bad Web Bot
Web App Attack
🇬🇧
knock
2026-06-03 04:55:45
(2 days ago)
Knock-Knock honeypot brute-force: proto8 (10 total hits)
Brute-Force