๐น๐ท
pashait
2026-11-12 04:39:09
UTC ยท
(1 day ago)
Auto-blocked by Seczar SecureOps โ TLS / SSL Anomaly Burst (13 events in 10min) at 2026-11-12 04:39
Hacking
๐ณ๐ฑ
doarg
2026-11-12 03:53:04
UTC ยท
(2 days ago)
[Thu Nov 12 04:53:00.765233 2026] [authz_core:error] [pid 374791] [client 172.71.95.76:13294] AH01630: client denied by server configuration: /var/www/doarg.com/debug.log
[Thu Nov 12 04:53:00.767774 2026] [authz_core:error] [pid 374817] [client 172.7 ...
show more
[Thu Nov 12 04:53:00.765233 2026] [authz_core:error] [pid 374791] [client 172.71.95.76:13294] AH01630: client denied by server configuration: /var/www/doarg.com/debug.log
[Thu Nov 12 04:53:00.767774 2026] [authz_core:error] [pid 374817] [client 172.71.95.76:13285] AH01630: client denied by server configuration: /var/www/doarg.com/access.log
[Thu Nov 12 04:53:00.770190 2026] [authz_core:error] [pid 374818] [client 172.71.95.76:13288] AH01630: client denied by server configuration: /var/www/doarg.com/error.log
[Thu Nov 12 04:53:01.823225 2026] [authz_core:error] [pid 374791] [client 172.71.95.76:13294] AH01630: client denied by server configuration: /var/www/doarg.com/application.log
[Thu Nov 12 04:53:04.052953 2026] [authz_core:error] [pid 374791] [client 172.71.95.76:13294] AH01630: client denied by server configuration: /var/www/doarg.com/openapi.yaml
...
show less
Brute-Force
๐บ๐ธ
craudiovizai
2026-11-06 12:30:44
UTC ยท
(1 week ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
Web App Attack
Bad Web Bot
๐ซ๐ท
dynamix
2026-11-05 19:29:23
UTC ยท
(1 week ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-11-04 23:08:26
UTC ยท
(1 week ago)
172.71.95.76 - - [05/Nov/2026:01:08:25 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.95.76 - - [05/Nov/2026:01:08:25 +0200] "GET /.env HTTP/1.1" 403 124 "-" "Mozilla/ ...
show more
172.71.95.76 - - [05/Nov/2026:01:08:25 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.95.76 - - [05/Nov/2026:01:08:25 +0200] "GET /.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.95.76 - - [05/Nov/2026:01:08:26 +0200] "GET /.cursor/mcp.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.95.76 - - [05/Nov/2026:01:08:25 +0200] "GET /.claude/settings.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.95.76 - - [05/Nov/2026:01:08:25 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.95.76 - - [05/Nov/2026:01:08:26 +0200] "GET /.aws/.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.95.76 - - [05/Nov/2026:01:08:26 +0200] "GET /.aws/config HTTP/1.1" 403
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-03 06:14:48
UTC ยท
(1 week ago)
172.71.95.76 - - [03/Nov/2026:08:14:38 +0200] "GET /blog/ HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
172.71.95.76 - - [03/Nov/2026:08:14:38 +0200] "GET /wp/ ...
show more
172.71.95.76 - - [03/Nov/2026:08:14:38 +0200] "GET /blog/ HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
172.71.95.76 - - [03/Nov/2026:08:14:38 +0200] "GET /wp/ HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
172.71.95.76 - - [03/Nov/2026:08:14:39 +0200] "GET /wordpress/ HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
172.71.95.76 - - [03/Nov/2026:08:14:39 +0200] "GET /site/ HTTP/1.1" 404 185 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
172.71.95.76 - - [03/Nov/2026:08:14:40 +0200] "GET /news/ HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
172.71.95.76 - - [03/Nov/2026:0
...
show less
Bad Web Bot
Web App Attack
๐ง๐ท
paradoxnetworks
2026-10-29 13:33:49
UTC ยท
(2 weeks ago)
2026-10-29T13:33:40.479207+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[986772]: Failed password for root from 172.71.95.76 port 50344 ssh2
2026-10-29T13:33:44.123595+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[986772]: Failed password for r ...
show more
2026-10-29T13:33:40.479207+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[986772]: Failed password for root from 172.71.95.76 port 50344 ssh2
2026-10-29T13:33:44.123595+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[986772]: Failed password for root from 172.71.95.76 port 50344 ssh2
2026-10-29T13:33:48.270048+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[986772]: Failed password for root from 172.71.95.76 port 50344 ssh2
...
show less
Brute-Force
SSH
๐ซ๐ท
dynamix
2026-10-25 23:21:36
UTC ยท
(2 weeks ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-23 20:48:39
UTC ยท
(3 weeks ago)
172.71.95.76 - - [23/Oct/2026:22:48:36 +0200] "GET /infos.php HTTP/1.1" 404 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:36 +0200] "GET /lms/.env HTTP/1.1" 403 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48 ...
show more
172.71.95.76 - - [23/Oct/2026:22:48:36 +0200] "GET /infos.php HTTP/1.1" 404 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:36 +0200] "GET /lms/.env HTTP/1.1" 403 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:36 +0200] "GET /login HTTP/1.1" 404 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:36 +0200] "GET /market/.env HTTP/1.1" 403 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:36 +0200] "GET /media/.env HTTP/1.1" 403 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:36 +0200] "GET /node/api/.env HTTP/1.1" 403 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:37 +0200] "GET /old/aws_config HTTP/1.1" 404 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:37 +0200] "GET /opt/mailcow-dockerized/mailcow.conf HTTP/1.1" 403 124 "-" "TLM-Audit-Scanner/2.0"
172.71.95.76 - - [23/Oct/2026:22:48:37 +0200] "GET /package-updates/*.cgi HTTP/1.1" 404 124 "-" "TLM-Au
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-21 06:40:47
UTC ยท
(3 weeks ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 05:55:10
UTC ยท
(3 weeks ago)
Multiple WAF Violations
Web App Attack
๐ง๐ช
madeit
2026-10-08 12:03:18
UTC ยท
(1 month ago)
Web App Attack
๐ซ๐ท
dynamix
2026-10-06 08:51:02
UTC ยท
(1 month ago)
Multiple WAF Violations
Web App Attack
๐ต๐ฐ
sbk97 (https://sayor.net)
2026-10-04 07:42:32
UTC ยท
(1 month ago)
SAYOR honeypot: observed attack /geoserver/wfs?request=ListStoredQueries&service=wfs&version=2.0.0
Brute-Force
๐บ๐ธ
Antairus
2026-09-25 18:02:17
UTC ยท
(1 month ago)
Port scan detected. Scanned ports: 8080. Detected by firewall.
Port Scan