🇬🇧
PeravixGroup
2026-06-02 06:43:17
(1 day ago)
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show more
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
🇺🇸
Mantene
2026-06-02 06:26:57
(1 day ago)
172.184.209.150 - - [02/Jun/2026:02:26:52 -0400] "GET /.env HTTP/1.1" 404 143 "-" "Mozilla/5.0 (X11; ...
show more
172.184.209.150 - - [02/Jun/2026:02:26:52 -0400] "GET /.env HTTP/1.1" 404 143 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
172.184.209.150 - - [02/Jun/2026:02:26:55 -0400] "GET /.env.production HTTP/1.1" 404 154 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
SSH
🇯🇵
VXG-NET
2026-06-02 05:53:32
(1 day ago)
port=80, indicator_type=info-leak
Hacking
🇺🇸
TPI-Abuse
2026-06-02 05:29:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.184.209.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.209.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 01:29:37.521964 2026] [security2:error] [pid 16465:tid 16465] [client 172.184.209.150:20624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.69"] [uri "/.git/config"] [unique_id "ah5qQXfc3qh0DL05xW-kggAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
marcel-knorr.de
2026-06-02 05:09:59
(1 day ago)
[MK-Root1] Blocked by UFW
Brute-Force
Port Scan
🇧🇾
lns.bz
2026-06-02 03:44:39
(2 days ago)
Too many 404 requests [BY]
Web App Attack
🇷🇸
Scan
2026-06-02 01:15:30
(2 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇫🇷
dynamix
2026-06-02 00:46:33
(2 days ago)
Multiple WAF Violations
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-21 21:59:55
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-20.
show less
Web App Attack
SSH
Hacking
🇳🇱
homeshowdomain.nl
2026-05-20 21:59:31
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-05-20
Web App Attack
SSH
Hacking
🇨🇭
leo1305
2026-05-20 12:49:24
(2 weeks ago)
CrowdSec detection | scenario: http-sensitive-files
Web App Attack
Exploited Host
🇺🇸
TPI-Abuse
2026-05-20 12:35:08
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.184.209.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.209.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:35:03.751625 2026] [security2:error] [pid 5769:tid 5769] [client 172.184.209.150:1831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nebraskaadaptivesports.org"] [uri "/.env"] [unique_id "ag2qd1-wvBitgG7s0G7wTQAAAAY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:15:24
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.184.209.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.209.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:15:20.730738 2026] [security2:error] [pid 25370:tid 25370] [client 172.184.209.150:1202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "net-gal.com"] [uri "/.env"] [unique_id "ag2l2G-FmuPEjustsa9OewAAAA4"], referer: https://www.reddit.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-05-20 11:55:22
(2 weeks ago)
27 attempts against mh-misbehave-ban on plum
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 10:04:38
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.184.209.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.209.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 06:04:33.578114 2026] [security2:error] [pid 19677:tid 19677] [client 172.184.209.150:1383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.toddshelton.com"] [uri "/.env"] [unique_id "ag2HMQCMHidv7Td1p_-skgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack