🇳🇱
Site.eu
2026-09-17 05:03:19
(3 hours ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Eric
2026-09-17 02:07:23
(6 hours ago)
[Thu Sep 17 01:56:02.614007 2026] [security2:error] [pid 627267:tid 627267] [client 139.162.138.63:5 ...
show more
[Thu Sep 17 01:56:02.614007 2026] [security2:error] [pid 627267:tid 627267] [client 139.162.138.63:57098] [client 139.162.138.63] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/apache.conf"] [unique_id "aqtIsrvFq7ZemtLe3crqwwAAAA0"], referer: http://fambus.nl:80/apache.conf
[Thu Sep 17 01:56:17.594201 2026] [security2:error] [pid 631938:tid 631938] [client 139.162.138.63:37298] [client 139.162.138.63] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound A
...
show less
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-09-16 17:04:43
(15 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇳🇱
tmiland
2026-09-15 12:20:24
(1 day ago)
(nginx_404) Dot directory Honeypot Trap 139.162.138.63 (DE/Germany/139-162-138-63.ip.linodeuserconte ...
show more
(nginx_404) Dot directory Honeypot Trap 139.162.138.63 (DE/Germany/139-162-138-63.ip.linodeusercontent.com): 2 in the last 3600 secs; IP: 139.162.138.63; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/09/15 14:20:20 [error] 1656421#1656421: *8577 open() "/home/abuseip/public_html/.licenserc.yaml" failed (2: No such file or directory), client: 139.162.138.63, server: abuseip.cc, request: "GET /.licenserc.yaml HTTP/1.1", host: "abuseip.cc" 139.162.138.63 - - [15/Sep/2026:14:20:20 +0200] "GET /.licenserc.yaml HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0"
show less
Brute-Force
🇳🇱
e.fierstra
2026-09-15 05:41:44
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-09-15 02:00:20
(2 days ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇳🇱
e.fierstra
2026-09-15 00:28:33
(2 days ago)
excessive HTTP 404 errors
Bad Web Bot
🇳🇱
Site.eu
2026-09-14 23:36:27
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-14 21:59:23
(2 days ago)
Auto-ban: 634 malicious requests on 2026-09-13 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 634 malicious requests on 2026-09-13 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇳🇱
BlueWire Hosting
2026-09-14 19:23:17
(2 days ago)
Aggressive scanning resulting into 404
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-09-13 21:59:23
(3 days ago)
Auto-ban: >3000 req/min op 2026-09-13
Web App Attack
SSH
Hacking
🇧🇪
cmbplf
2026-09-13 21:05:27
(3 days ago)
11.880 4xx requests in 1 hour (2w5d12h)
Brute-Force
Bad Web Bot
🇳🇱
melroy89
2026-09-13 20:45:25
(3 days ago)
139.162.138.63 - - [13/Sep/2026:22:26:36 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh ...
show more
139.162.138.63 - - [13/Sep/2026:22:26:36 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15" "retromessenger.com" 0.001
139.162.138.63 - - [13/Sep/2026:22:31:06 +0200] "OPTIONS / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "retromessenger.com" 0.000
139.162.138.63 - - [13/Sep/2026:22:31:06 +0200] "GET / HTTP/1.1" 403 93 "http://retromessenger.com:80" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5) AppleWebKit/618.3.5 (KHTML, like Gecko) Version/17.4 Safari/618.3.5" "retromessenger.com" 0.001
139.162.138.63 - - [13/Sep/2026:22:33:43 +0200] "GET /access.log HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "retromessenger.com" 0.000
139.162.138.63 - - [13/Sep/2026:22:33:46 +0200] "GET /log/access.log HTTP/1.1" 403 93 "-" "M
...
show less
Web App Attack
2026-09-13 20:41:02
(3 days ago)
Bot / scanning and/or hacking attempts: GET /server-status HTTP/1.1
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-09-13 20:38:18
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack