🇳🇱
homeshowdomain.nl
2026-11-09 23:00:41
UTC ·
(7 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-08.
Web App Attack
SSH
Hacking
🇵🇱
Budyn
2026-11-09 02:39:52
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: gitlab.astropot.space | Path: /.git/HEAD | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: gitlab.astropot.space | Path: /.git/HEAD | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-08 23:01:17
UTC ·
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-08
Web App Attack
SSH
Hacking
🇳🇱
middelkoopcc
2026-11-08 20:19:01
UTC ·
(1 day ago)
2026-11-08 21:15:29 GET /.git/HEAD [301] && 2026-11-08 21:15:29 GET /stats.json [301] && 2026-11-08 21:15:29 GET /webpack.json [301] && 111 more within 20 minutes
Web App Attack
🇺🇸
infra-monitor
2026-11-08 20:00:04
UTC ·
(1 day ago)
Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe, crowdsecurity/http-probing
Port Scan
Web App Attack
🇬🇧
Celtic
2026-11-08 19:39:41
UTC ·
(1 day ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
🇩🇪
SwinT
2026-11-08 17:00:04
UTC ·
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:02:28
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.182.210.82 (82.210.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:02:20.437944 2026] [security2:error] [pid 29340:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.210.82 (82.210.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:02:20.437944 2026] [security2:error] [pid 29340:tid 29340] [client 34.182.210.82:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bohk.com"] [uri "/.git/HEAD"] [unique_id "avCdDEKJ2ffjScSCKfJADwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
JohnAtlas
2026-11-08 14:14:18
UTC ·
(1 day ago)
Web attack/scanner: 82 HTTP requests probing /.git/HEAD, /.git/hooks/post-checkout, /.git/hooks/post-receive, /.git/hooks/pre-commit, /.git/hooks/pre-push, /.git/hooks/update, /.git/info/refs, /.git/lfs/config, 82 x 404. Automated log monitoring.
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-08 14:09:02
UTC ·
(1 day ago)
(mod_security) mod_security (id:248270) triggered by 34.182.210.82 (82.210.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:08:58.355093 2026] [security2:error] [pid 31815:tid ...
show more
(mod_security) mod_security (id:248270) triggered by 34.182.210.82 (82.210.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:08:58.355093 2026] [security2:error] [pid 31815:tid 31815] [client 34.182.210.82:57588] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at REQUEST_HEADERS:Referer. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||isyourcorporationsafe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "isyourcorporationsafe.com"] [uri "/"] [unique_id "avCCeqj7gGT2BbUeDRkXAwAAAAk"], referer: ${jndi:ldap://127.0.0.1/bifrost-probe}
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 11:50:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.182.210.82 (82.210.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:50:30.404808 2026] [security2:error] [pid 30652:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.210.82 (82.210.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:50:30.404808 2026] [security2:error] [pid 30652:tid 30652] [client 34.182.210.82:32866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icsubb.com"] [uri "/.git/HEAD"] [unique_id "avBiBgan6vOJ_S3UWgyuhQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 11:29:22
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.182.210.82 (82.210.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:29:19.157551 2026] [security2:error] [pid 10325:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.210.82 (82.210.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:29:19.157551 2026] [security2:error] [pid 10325:tid 10325] [client 34.182.210.82:37506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackoakprop.com"] [uri "/.git/HEAD"] [unique_id "avBdD71jg-MdTWVb0fhopAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-08 11:08:01
UTC ·
(1 day ago)
Abuse detected: rate-limit and/or cross-site thresholds exceeded.
Bad Web Bot
Anonymous
2026-11-08 09:19:38
UTC ·
(1 day ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇸🇪
vaia.cloud
2026-11-08 08:45:01
UTC ·
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack