🇩🇪
s@ch@
2026-05-19 15:15:04
(1 month ago)
Jail: plesk-modsecurity | Web application attack (Plesk ModSecurity)
Web App Attack
🇮🇪
Jim Keir
2026-05-19 11:50:50
(1 month ago)
2026-05-19 11:50:49 34.105.247.60 File scanning, blocking 34.105.247.60 for 5 minutes
Web App Attack
🇹🇷
ozyurterdem
2026-05-19 04:02:14
(1 month ago)
T-Pot honeypot: 25 conns — scanner. SiberKale Threat Intel.
Port Scan
🇺🇸
Watto
2026-05-18 19:23:16
(1 month ago)
Honeypot caught web brute force / scanning from United Kingdom; 62 events recorded by kiosk-watchtow ...
show more
Honeypot caught web brute force / scanning from United Kingdom; 62 events recorded by kiosk-watchtower (Cowrie + canary stack). Automated report from honeypot, please do not contact owner.
show less
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2026-05-15 07:12:24
(1 month ago)
Web attack from 34.105.247.60
Web App Attack
🇳🇱
wlt-blocker
2026-05-15 04:34:39
(1 month ago)
Unauthorized access to webpage admin
Web App Attack
2026-05-15 04:32:19
(1 month ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
WellSpring
2026-05-15 03:26:55
(1 month ago)
git exposure on 703.today/.git/config — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
2026-05-15 02:03:31
(1 month ago)
(caddyscan) Scanner path probe from 34.105.247.60 (GB/United Kingdom/60.247.105.34.bc.googleusercont ...
show more
(caddyscan) Scanner path probe from 34.105.247.60 (GB/United Kingdom/60.247.105.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:02:01:53 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:02:01:58 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:02:02:33 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:02:02:53 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:02:03:28 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
2026-05-15 01:48:17
(1 month ago)
(caddyscan) Scanner path probe from 34.105.247.60 (GB/United Kingdom/60.247.105.34.bc.googleusercont ...
show more
(caddyscan) Scanner path probe from 34.105.247.60 (GB/United Kingdom/60.247.105.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:36:47 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:37:19 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:46:47 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:47:57 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:48:15 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
🇩🇪
4server
2026-05-15 01:37:30
(1 month ago)
[FriMay1503:37:26.9935942026][security2:error][pid4182707:tid4182782][client34.105.247.60:0]ModSecur ...
show more
[FriMay1503:37:26.9935942026][security2:error][pid4182707:tid4182782][client34.105.247.60:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.wp.aaaa6877.org\"][uri\"/.git/config\"][unique_id\"agZ41jECs425JNdxCHcqhwAAAIs\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-05-15 01:25:05
(1 month ago)
(caddyscan) Scanner path probe from 34.105.247.60 (GB/United Kingdom/60.247.105.34.bc.googleusercont ...
show more
(caddyscan) Scanner path probe from 34.105.247.60 (GB/United Kingdom/60.247.105.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:04:09 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:04:17 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:04:48 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:24:59 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.105.247.60 - - [15/May/2026:01:24:59 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
🇩🇪
Blexyel
2026-05-15 01:15:04
(1 month ago)
34.105.247.60 - - [15/May/2026:03:15:04 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ...
show more
34.105.247.60 - - [15/May/2026:03:15:04 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 YaBrowser/19.6.2.594 (beta) Yowser/2.5 Safari/537.36" "136.243.2.38"
...
show less
Brute-Force
Web App Attack
🇫🇷
EDSL
2026-05-15 01:14:33
(1 month ago)
[mail.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 443)
Web App Attack
Hacking
Port Scan
2026-05-15 00:40:48
(1 month ago)
34.105.247.60 - - [15/May/2026:02:40:47 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ...
show more
34.105.247.60 - - [15/May/2026:02:40:47 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/536.3 (KHTML, like Gecko) Chrome/19.0.1061.1 Safari/536.3"
show less
Web App Attack