🇺🇸
Rayulcifer
2026-06-24 04:28:34
(2 days ago)
[Tue Jun 23 23:28:33.139888 2026] [access_compat:error] [pid 3358626:tid 124098273322688] [client 17 ...
show more
[Tue Jun 23 23:28:33.139888 2026] [access_compat:error] [pid 3358626:tid 124098273322688] [client 172.184.175.146:6794] AH01797: client denied by server configuration: proxy:http://localhost:4000/
[Tue Jun 23 23:28:33.282137 2026] [access_compat:error] [pid 3360130:tid 124096218126016] [client 172.184.175.146:6785] AH01797: client denied by server configuration: proxy:http://localhost:4000/
[Tue Jun 23 23:28:33.441453 2026] [access_compat:error] [pid 3360130:tid 124098357216960] [client 172.184.175.146:6787] AH01797: client denied by server configuration: proxy:http://localhost:4000/
[Tue Jun 23 23:28:33.587078 2026] [access_compat:error] [pid 3358626:tid 124099439351488] [client 172.184.175.146:6832] AH01797: client denied by server configuration: proxy:http://localhost:4000/
[Tue Jun 23 23:28:33.728251 2026] [access_compat:error] [pid 3362479:tid 124095622538944] [client 172.184.175.146:6814] AH01797: client denied by server configuration: proxy:http://localhost:4000/
...
show less
Brute-Force
SSH
🇯🇵
SentinalX by uzumaru
2026-06-24 03:59:39
(2 days ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.eastmoney.com:443
show less
Open Proxy
Port Scan
🇧🇾
lns.bz
2026-06-09 12:36:36
(2 weeks ago)
Too many 404 requests [BY]
Web App Attack
🇫🇷
masterguru
2026-06-09 12:33:46
(2 weeks ago)
Host header is a numeric IP address. Pattern match "^ (920350-135)
Hacking
Bad Web Bot
🇺🇸
kosada.com
2026-06-09 11:43:26
(2 weeks ago)
Web vulnerability probing: /.env.backup (bogus vhost/SNI)
Web App Attack
🇬🇧
PeravixGroup
2026-06-09 11:35:01
(2 weeks ago)
Imunify360 WAF block (graylisted)
Web App Attack
2026-06-09 11:16:21
(2 weeks ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show more
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Jun 9, 11:16 UTC. Origin: United States, San Jose.
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
ecs.ge
2026-06-09 11:07:59
(2 weeks ago)
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack
Hacking
2026-06-02 16:03:49
(3 weeks ago)
IP & Port Scan.
SSH
Port Scan
Brute-Force
🇬🇧
PeravixGroup
2026-06-02 13:54:27
(3 weeks ago)
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ...
show more
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
2026-06-02 13:00:00
(3 weeks ago)
SSH Brute-Force
DDoS Attack
Port Scan
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-02 10:50:50
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.184.175.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.175.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:50:43.344314 2026] [security2:error] [pid 19563:tid 19563] [client 172.184.175.146:62592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.188"] [uri "/.git/HEAD"] [unique_id "ah61gyOFG5B57jWccdjeyAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 10:31:46
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.184.175.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.175.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:31:42.906065 2026] [security2:error] [pid 23491:tid 23640] [client 172.184.175.146:62608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.178"] [uri "/.git/HEAD"] [unique_id "ah6xDuqz84QZJpwapC8vrAAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇭
Sawasdee
2026-06-02 10:30:44
(3 weeks ago)
Port Scan
...
Port Scan
🇺🇸
TPI-Abuse
2026-06-02 10:16:43
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.184.175.146 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.175.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:16:39.930830 2026] [security2:error] [pid 29775:tid 29775] [client 172.184.175.146:62634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.193"] [uri "/.git/config"] [unique_id "ah6thwuVb6RXfOzPuQIuEgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack