🇩🇪
ghostwarriors
2026-11-14 08:50:13
UTC ·
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
throny
2026-11-14 08:34:54
UTC ·
(1 day ago)
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 5 on 1 host(s)
User agent: Friendica/2026.11-dev DatabaseVersion/1606 +https://fedi.root64.de | Friendica/2026.11-dev Da ...
show more
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 5 on 1 host(s)
User agent: Friendica/2026.11-dev DatabaseVersion/1606 +https://fedi.root64.de | Friendica/2026.11-dev DatabaseVersion/1606 Request/ServerInfo/1 +https://fedi.root64.de
Requested, e.g.:
- social.[REDACTED]/
- social.[REDACTED]/.well-known/nodeinfo
- social.[REDACTED]/.well-known/x-nodeinfo2
- social.[REDACTED]/xrpc/com.atproto.server.describeServer
show less
Bad Web Bot
🇧🇷
ICS Labs
2026-11-11 17:16:38
UTC ·
(4 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-11 UTC.
Brute-Force
🇩🇪
ghostwarriors
2026-11-11 06:50:16
UTC ·
(4 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
throny
2026-11-11 06:28:05
UTC ·
(4 days ago)
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Friendica/2026.11-dev DatabaseVersion/1605 Request/ServerInfo/1 +https://fedi.root64.de | Fri ...
show more
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Friendica/2026.11-dev DatabaseVersion/1605 Request/ServerInfo/1 +https://fedi.root64.de | Friendica/2026.11-dev DatabaseVersion/1605 Request/URLVerifier/1 +https://fedi.root64.de
Requested, e.g.:
- social.[REDACTED]/
- social.[REDACTED]/.well-known/nodeinfo
- social.[REDACTED]/.well-known/x-nodeinfo2
show less
Bad Web Bot
Anonymous
2026-11-10 23:35:27
UTC ·
(4 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-11-09 15:10:44
UTC ·
(6 days ago)
[Mon Nov 09 16:10:44.129250 2026] [security2:error] [pid 3924891:tid 3924894] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/ ...
show more
[Mon Nov 09 16:10:44.129250 2026] [security2:error] [pid 3924891:tid 3924894] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "eu.mmn.ca"] [uri "/activitypub/kevin"] [unique_id "avHidJ_NlDUuEBpiI7wxqwAAAAE"]
[Mon Nov 09 16:10:44.254951 2026] [security2:error] [pid 3924891:tid 3924911] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag
...
show less
Web App Attack
Bad Web Bot
Anonymous
2026-11-08 11:52:39
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇫🇮
oh.mg
2026-10-26 22:18:30
UTC ·
(2 weeks ago)
[Mon Oct 26 23:18:29.383282 2026] [security2:error] [pid 3833722:tid 3833739] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/ ...
show more
[Mon Oct 26 23:18:29.383282 2026] [security2:error] [pid 3833722:tid 3833739] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "eu.mmn.ca"] [uri "/activitypub/kevin"] [unique_id "at_RtXHd6HMdqWaF1fZJDQAAAA4"]
[Mon Oct 26 23:18:29.500410 2026] [security2:error] [pid 3833722:tid 3833746] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-10-03 16:29:06
UTC ·
(1 month ago)
[Sat Oct 03 18:29:05.675851 2026] [security2:error] [pid 1293451:tid 1293458] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/ ...
show more
[Sat Oct 03 18:29:05.675851 2026] [security2:error] [pid 1293451:tid 1293458] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "eu.mmn.ca"] [uri "/activitypub/kevin"] [unique_id "asEtURlJKWugpXu2W7aEmgAAAEU"]
[Sat Oct 03 18:29:05.803062 2026] [security2:error] [pid 1293451:tid 1293473] [client 188.193.34.84:0] [client 188.193.34.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag
...
show less
Web App Attack
Bad Web Bot
🇩🇪
hbrks
2026-06-22 21:09:18
UTC ·
(4 months ago)
16 attack(s) detected, such as these: {"event":"web_block","ip":"188.193.34.84","host":"peer.adalta.social","request":"GET /video-channels/news_de HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-22T21:09:18 00:00","logentry":"pee ...
show more
16 attack(s) detected, such as these: {"event":"web_block","ip":"188.193.34.84","host":"peer.adalta.social","request":"GET /video-channels/news_de HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-22T21:09:18 00:00","logentry":"peer.adalta.social 188.193.34.84 - - [22/Jun/2026:21:09:18 0000] \"GET /video-channels/news_de HTTP/1.1\" 503 190 \"-\" \"Friendica/2026.08-dev DatabaseVersion/1597 Request/ContactInfo/1 https://social.ddns.wtf\" \"-\""} * Report Details *: https://p4u.xyz/RADDTF8MTXT/1* IP Details *: https://p4u.xyz/RADDTF8MTXT/2
show less
Web Spam
Hacking
Bad Web Bot
🇩🇪
hbrks
2026-06-22 08:59:23
UTC ·
(4 months ago)
8 attack(s) detected, such as these: {"event":"web_block","ip":"188.193.34.84","host":"peer.adalta.social","request":"GET /video-channels/news_fr HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-22T08:59:23 00:00","logentry":"peer ...
show more
8 attack(s) detected, such as these: {"event":"web_block","ip":"188.193.34.84","host":"peer.adalta.social","request":"GET /video-channels/news_fr HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-22T08:59:23 00:00","logentry":"peer.adalta.social 188.193.34.84 - - [22/Jun/2026:08:59:23 0000] \"GET /video-channels/news_fr HTTP/1.1\" 503 190 \"-\" \"Friendica/2026.08-dev DatabaseVersion/1597 Request/ContactInfo/1 https://social.ddns.wtf\" \"-\""} * Report Details *: https://p4u.xyz/MX9VF22HSG9/1* IP Details *: https://p4u.xyz/MX9VF22HSG9/2
show less
Web Spam
Hacking
Bad Web Bot
🇨🇱
n33
2026-01-15 18:53:45
UTC ·
(10 months ago)
Attack detected detected by fail2ban. Service: nginx-ghost-upstream. Banned after 3 failed attempts.
Hacking
Web App Attack
🇨🇱
n33
2026-01-08 18:49:03
UTC ·
(10 months ago)
Attack detected detected by fail2ban. Service: nginx-ghost-upstream. Banned after 3 failed attempts.
Hacking
Web App Attack
🇨🇱
n33
2025-12-26 05:24:23
UTC ·
(10 months ago)
Attack detected detected by fail2ban. Service: nginx-ghost-upstream. Banned after 3 failed attempts.
Hacking
Web App Attack