🇳🇿
Antinson
2026-05-20 10:59:55
(5 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇩🇪
Ba-Yu
2026-05-20 10:38:03
(5 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇮🇩
Burayot
2026-05-20 10:37:00
(5 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.81.248.43 (US/United States/ip43.kcy.lh-nap.net): 1 in the last 3600 secs
Web App Attack
🇺🇸
MPL
2026-05-20 10:31:05
(5 months ago)
tcp ports: 80,443 (6 or more attempts)
Port Scan
🇦🇺
2000cn.com.au
2026-05-20 10:30:49
(5 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-05-20 10:28:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.81.248.43 (ip43.kcy.lh-nap.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 06:28:36.180354 2026] [security2:error] [pid 15463:tid 15463] [client 216. ...
show more
(mod_security) mod_security (id:210492) triggered by 216.81.248.43 (ip43.kcy.lh-nap.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 06:28:36.180354 2026] [security2:error] [pid 15463:tid 15463] [client 216.81.248.43:60508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestrealtors.com"] [uri "/.git/HEAD"] [unique_id "ag2M1FVi_Sm1WCTDWCqPMwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2025-09-18 21:51:43
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇩🇪
swk
2025-09-18 01:34:31
(1 year ago)
216.81.248.43 - - [18/Sep/2025:09:34:15 +0800] "GET / HTTP/1.1" 200 2344 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36"
216.81.248.43 - - [18/Sep/2025:09:34:30 +0800] "GET //cdnjs.cloudflar ...
show more
216.81.248.43 - - [18/Sep/2025:09:34:15 +0800] "GET / HTTP/1.1" 200 2344 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36"
216.81.248.43 - - [18/Sep/2025:09:34:30 +0800] "GET //cdnjs.cloudflare.com/ajax/libs/moment.js/2.29.1/moment.min.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 4.4.2; GT-I9190) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"
216.81.248.43 - - [18/Sep/2025:09:34:30 +0800] "GET //cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.0/js.cookie.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 5.2; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1"
...
show less
Hacking
Web App Attack
2025-09-18 00:43:42
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇩🇪
rh24
2025-09-18 00:42:05
(1 year ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 216.81.248.43 (US/United States/ip43.kcy.lh-nap.net)
Bad Web Bot
🇩🇪
Admins@FBN
2025-09-18 00:16:27
(1 year ago)
Threat Host blocked...
Web Spam
Email Spam
Hacking
🇩🇪
raspi4
2025-09-17 22:27:35
(1 year ago)
Fail2Ban Ban Triggered
Brute-Force
Web App Attack
2025-09-17 22:20:50
(1 year ago)
Sep 18 00:20:26 mail2 Nextcloud[131106]: {"reqId":"aMs0KuS9ol39TxLOZezogwAAARg","level":1,"time":"2025-09-17T22:20:26+00:00","remoteAddr":"216.81.248.43","user":"--","app":"core","method":"GET","url":"/","message":"Trusted domain error. \"216.81.248. ...
show more
Sep 18 00:20:26 mail2 Nextcloud[131106]: {"reqId":"aMs0KuS9ol39TxLOZezogwAAARg","level":1,"time":"2025-09-17T22:20:26+00:00","remoteAddr":"216.81.248.43","user":"--","app":"core","method":"GET","url":"/","message":"Trusted domain error. \"216.81.248.43\" tried to access using \"mail2.akcurate.de\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.2.516 Yowser/2.5 Safari/537.36","version":"31.0.6.2","data":{"app":"core"}}
Sep 18 00:20:39 mail2 Nextcloud[204615]: {"reqId":"aMs0N-UD72umVstlpmA4LAAAAVU","level":1,"time":"2025-09-17T22:20:39+00:00","remoteAddr":"216.81.248.43","user":"--","app":"core","method":"GET","url":"/core/img/manifest.js","message":"Trusted domain error. \"216.81.248.43\" tried to access using \"mail2.akcurate.de\" as host.","userAgent":"Mozilla/5.0 (X11; U; Linux x86_64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.835.94 Safari/535.1","version":"31.0.6.2","data":{"app":"core"}
...
show less
Brute-Force
Web App Attack
2025-09-17 21:22:53
(1 year ago)
DNS Compromise
DDoS Attack
🇩🇪
hbrks
2025-09-17 20:44:47
(1 year ago)
1 attack(s) detected since 2025-09-17T20:32:52.741Z, such as these: {"event":"nginx_block","ip":"216.81.248.43","host":"www.paganos.de","request":"GET / HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko ...
show more
1 attack(s) detected since 2025-09-17T20:32:52.741Z, such as these: {"event":"nginx_block","ip":"216.81.248.43","host":"www.paganos.de","request":"GET / HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.3.172 Yowser/2.5 Safari/537.36","reason":"service:unknow","timestamp":"2025-09-17T20:32:52 00:00","logentry":"www.paganos.de 216.81.248.43 - - [17/Sep/2025:20:32:52 0000] \"GET / HTTP/1.1\" 444 0 \"-\" \"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.3.172 Yowser/2.5 Safari/537.36\" \"-\" \"matched:service:unknow\… Report Details: https://p4u.xyz/BUX3UM65912/1IP Details: https://p4u.xyz/BUX3UM65912/2
show less
Web Spam
Hacking
Bad Web Bot