🇺🇸
jose.alvarez
2026-11-10 06:00:24
UTC ·
(9 hours ago)
SMTP spam rejected at RCPT by rbl:7amm7ghrglfb2mbbtyl6aa5e5m.sbl.dq.spamhaus.net; HELO=getprototypeof.xyz; envelope domain=getprototypeof.xyz; repeated attempts against a mail server.
Email Spam
🇳🇱
homeshowdomain.nl
2026-11-09 22:59:51
UTC ·
(16 hours ago)
Auto-ban: >3000 req/min op 2026-11-09
Web App Attack
SSH
Hacking
🇩🇪
John Chrys.
2026-11-09 18:50:22
UTC ·
(20 hours ago)
194.104.94.141 - - [09/Nov/2026:20:50:21 +0200] "POST /component/jce HTTP/1.1" 403 2218 "https://iaveris.gr/index.php?option=com_tags" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:51.0) Gecko/20100101 Firefox/51.0"
194.104.94.141 - - [09/Nov/202 ...
show more
194.104.94.141 - - [09/Nov/2026:20:50:21 +0200] "POST /component/jce HTTP/1.1" 403 2218 "https://iaveris.gr/index.php?option=com_tags" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:51.0) Gecko/20100101 Firefox/51.0"
194.104.94.141 - - [09/Nov/2026:20:50:21 +0200] "POST /index.php/component/jce HTTP/1.1" 403 2218 "https://iaveris.gr/index.php?option=com_tags" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:51.0) Gecko/20100101 Firefox/51.0"
194.104.94.141 - - [09/Nov/2026:20:50:21 +0200] "POST /index.php/component/jce HTTP/1.1" 403 2218 "https://iaveris.gr/index.php?option=com_tags" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:51.0) Gecko/20100101 Firefox/51.0"
194.104.94.141 - - [09/Nov/2026:20:50:21 +0200] "POST /component/jce HTTP/1.1" 403 2819 "https://iaveris.gr/index.php?option=com_tags" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:51.0) Gecko/20100101 Firefox/51.0"
194.104.94.141 - - [09/Nov/2026:20:50:21 +0200] "POST /index.php?option=com_jce HTTP/1.1" 403 2819 "
...
show less
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-09 18:38:38
UTC ·
(20 hours ago)
[cb-02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 194.104.94.141 - - [09/Nov/2026:19:38:33 +0100] "GET /test.php HTTP/1.1" 500 6023 "https://staging.gekvanfietsen.nl/.env" "Mozilla/5.0 (compatibl ...
show more
[cb-02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 194.104.94.141 - - [09/Nov/2026:19:38:33 +0100] "GET /test.php HTTP/1.1" 500 6023 "https://staging.gekvanfietsen.nl/.env" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)"
...
show less
Bad Web Bot
Web App Attack
🇿🇦
vanderhost
2026-11-09 16:54:26
UTC ·
(22 hours ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /livewire/livewire.js via rule: /livewire
Web App Attack
Bad Web Bot
2026-11-09 16:50:28
UTC ·
(22 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇳🇱
Site.eu
2026-11-09 09:53:10
UTC ·
(1 day ago)
Excessive multi-domain requests
Brute-Force
2026-11-08 22:06:49
UTC ·
(1 day ago)
194.104.94.141 (SE/Sweden/Västerbotten County/Umeå/-/[redacted]
Hacking
🇺🇸
servicesboats
2026-11-08 08:31:36
UTC ·
(2 days ago)
194.104.94.141 - - [08/Nov/2026:00:31:35 -0800] "POST /customer/address_file/upload HTTP/1.1" 403 586 "https://servicesboats.com/" "Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 06:51:25
UTC ·
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 194.104.94.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:51:17.598821 2026] [security2:error] [pid 9187:tid 9187] [client 194.104.94.141:57266] M ...
show more
(mod_security) mod_security (id:210730) triggered by 194.104.94.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:51:17.598821 2026] [security2:error] [pid 9187:tid 9187] [client 194.104.94.141:57266] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||elevese.com|F|2"] [data ".pkg_sourcerer.sys.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elevese.com"] [uri "/language/en-GB/en-GB.pkg_sourcerer.sys.ini"] [unique_id "avAb5U2z_6HFLLeioDUMVQAAABA"], referer: https://elevese.com/administrator/manifests/packages/pkg_sourcerer.xml
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
elcruzado.es
2026-11-08 04:10:52
UTC ·
(2 days ago)
194.104.94.141 (SE/Sweden/-), more than 10 Apache 403 hits
Hacking
🇳🇱
Site.eu
2026-11-08 02:40:38
UTC ·
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇬🇧
andypiper
2026-11-08 02:02:38
UTC ·
(2 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-11-08 01:41:39
UTC ·
(2 days ago)
15 attempts against mh-modsecurity-ban on lunar
Brute-Force
Web App Attack
🇩🇪
4server
2026-11-08 01:09:21
UTC ·
(2 days ago)
[SunNov0802:09:19.1810952026][security2:error][pid3461944:tid3462085][client194.104.94.141:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ...
show more
[SunNov0802:09:19.1810952026][security2:error][pid3461944:tid3462085][client194.104.94.141:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"brunocampagna.com\"][uri\"/media/sourcerer/js/popup.js\"][unique_id\"au_LvzBf74txTNwLamBGYwAAANY\"]
show less
Port Scan
Brute-Force
Web App Attack
