🇺🇸
TPI-Abuse
2026-06-17 04:07:49
(17 minutes ago)
(mod_security) mod_security (id:210492) triggered by 142.93.135.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.135.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 00:07:45.705217 2026] [security2:error] [pid 26143:tid 26150] [client 142.93.135.65:58572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.79"] [uri "/.git/HEAD"] [unique_id "ajIdkQxaeJY4C88XU7Oz1wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-06-17 03:30:25
(54 minutes ago)
2026-06-17 06:30:24,942 fail2ban.actions [2945670]: NOTICE [apache-404] Ban 142.93.135.65
20 ...
show more
2026-06-17 06:30:24,942 fail2ban.actions [2945670]: NOTICE [apache-404] Ban 142.93.135.65
2026-06-17 06:30:25,017 fail2ban.actions [2945670]: NOTICE [web-scanner] Ban 142.93.135.65
2026-06-17 06:30:25,090 fail2ban.actions [2945670]: NOTICE [apache-security] Ban 142.93.135.65
2026-06-17 06:30:25,150 fail2ban.actions [2945670]: NOTICE [apache-dirscan] Ban 142.93.135.65
2026-06-17 06:30:25,382 fail2ban.actions [2945670]: NOTICE [laravel-auth] Ban 142.93.135.65
...
show less
Brute-Force
Web App Attack
🇺🇸
sumnone
2026-06-17 02:51:21
(1 hour ago)
Port probing on unauthorized port 2078
Port Scan
Hacking
Exploited Host
🇩🇪
EGP Abuse Dept
2026-06-17 02:10:35
(2 hours ago)
Scanning for web/db/file exploits on tpc-025.mach3builders.nl
SQL Injection
Bad Web Bot
Web App Attack
🇫🇮
pixiekat
2026-06-17 02:03:54
(2 hours ago)
[Wed Jun 17 03:03:40.953217 2026] [authz_core:error] [pid 78590:tid 78634] [client 142.93.135.65:367 ...
show more
[Wed Jun 17 03:03:40.953217 2026] [authz_core:error] [pid 78590:tid 78634] [client 142.93.135.65:36720] AH01630: client denied by server configuration: /var/www/html/.env
[Wed Jun 17 03:03:47.773795 2026] [authz_core:error] [pid 78520:tid 78579] [client 142.93.135.65:36764] AH01630: client denied by server configuration: /var/www/html/.env.backup
[Wed Jun 17 03:03:48.729681 2026] [authz_core:error] [pid 78520:tid 78581] [client 142.93.135.65:36784] AH01630: client denied by server configuration: /var/www/html/.env.save
[Wed Jun 17 03:03:51.939496 2026] [authz_core:error] [pid 78590:tid 78618] [client 142.93.135.65:55290] AH01630: client denied by server configuration: /var/www/html/.env.old
[Wed Jun 17 03:03:53.091515 2026] [authz_core:error] [pid 78520:tid 78582] [client 142.93.135.65:55308] AH01630: client denied by server configuration: /var/www/html/.env.bak
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-17 00:33:30
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 142.93.135.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.135.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 20:33:25.970411 2026] [security2:error] [pid 19317:tid 19317] [client 142.93.135.65:56404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.116"] [uri "/.git/logs/HEAD"] [unique_id "ajHrVbODjOXAalZ2b4ImMQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-06-17 00:33:17
(3 hours ago)
Rule : Security
Rule: Security
Event: Security
0 - %592 142.93.135.65 55930 77.90.37.146 2083 6 S ...
show more
Rule : Security
Rule: Security
Event: Security
0 - %592 142.93.135.65 55930 77.90.37.146 2083 6 Stealth 154698 %597 13
show less
Port Scan
Hacking
Brute-Force
🇷🇸
Scan
2026-06-17 00:29:58
(3 hours ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
RAP
2025-11-22 01:02:28
(6 months ago)
2025-11-22 01:02:28 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan
Web App Attack
🇬🇧
[email protected]
2025-11-22 00:36:51
(6 months ago)
...
Brute-Force
SSH
🇹🇷
rtbh.com.tr
2025-11-21 20:10:02
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
ghostwarriors
2025-11-20 21:20:05
(6 months ago)
Unauthorized connection attempt detected, SSH Brute-Force
Port Scan
Brute-Force
SSH
🇫🇷
Szymekk
2025-11-20 21:01:55
(6 months ago)
Honeypot [srv02]: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:root123, root ...
show more
Honeypot [srv02]: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:root123, root:root321, root:123, root:321, root:pass, root:qwerty, root:password, root:111111, postgres:postgres, oracle:oracle
• Number of login attempts: 11
• 4 command(s) were executed during the session
• Client: SSH-2.0-Go
show less
Hacking
Brute-Force
SSH
🇨🇭
MLCloud
2025-11-20 21:01:47
(6 months ago)
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:root123, root:roo ...
show more
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:root123, root:root321, root:123, root:321, root:pass, root:qwerty, root:password, root:111111, postgres:postgres, oracle:oracle
• Number of login attempts: 11
• 4 command(s) were executed during the session
• Client: SSH-2.0-Go
show less
Hacking
Brute-Force
SSH
🇬🇧
David Gebler
2025-11-20 21:01:02
(6 months ago)
Brute-Force
SSH