🇳🇱
homeshowdomain.nl
2026-10-09 21:59:49
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-08.
show less
Web App Attack
SSH
Hacking
🇳🇱
hu22am
2026-10-09 05:44:07
(1 day ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /.git/config via rule: / ...
show more
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /.git/config via rule: /.git
show less
Web App Attack
Bad Web Bot
🇨🇭
🇨🇭 Hosting
2026-10-09 05:10:25
(1 day ago)
Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-09 04:42:17
(1 day ago)
[ti-29al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-29al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.185.247.54 - - [09/Oct/2026:06:42:10 +0200] "GET /fzv5k1dxas249qh5730z HTTP/2.0" 404 1694 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.185.247.54 - - [09/Oct/2026:06:42:10 +0200] "GET /asset-manifest.json HTTP/2.0" 404 1694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.185.247.54 - - [09/Oct/2026:06:42:10 +0200] "GET /dist/manifest.json HTTP/2.0" 404 1694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.185.247.54 - - [09/Oct/2
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-09 04:14:14
(1 day ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-09 03:11:40
(2 days ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jormaster3k
2026-10-09 03:09:05
(2 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 02:48:10
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.247.54 (54.247.185.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.247.54 (54.247.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 22:48:07.220685 2026] [security2:error] [pid 25631:tid 25631] [client 34.185.247.54:38590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mavikalem.org"] [uri "/.htpasswd"] [unique_id "ashV57G_otK5g1iGecgLDwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 02:29:15
(2 days ago)
(mod_security) mod_security (id:218420) triggered by 34.185.247.54 (54.247.185.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:218420) triggered by 34.185.247.54 (54.247.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 22:29:10.855296 2026] [security2:error] [pid 18678:tid 18678] [client 34.185.247.54:50122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||indie100.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "indie100.com"] [uri "/index.php"] [unique_id "ashRdlpi6uMoGQl29Mk5JQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-09 02:13:54
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 02:09:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.247.54 (54.247.185.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.247.54 (54.247.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 22:09:38.774501 2026] [security2:error] [pid 29918:tid 29937] [client 34.185.247.54:54510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emehache.net"] [uri "/api/console/api_server"] [unique_id "ashM4i3UCAqnXBrG73Bf6QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-10-09 01:53:17
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 01:45:50
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.247.54 (54.247.185.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.247.54 (54.247.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:45:43.597230 2026] [security2:error] [pid 24412:tid 24412] [client 34.185.247.54:46322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bknj2.org"] [uri "/.env.example"] [unique_id "ashHR_U8-LHvrWbegr0K1wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-10-09 01:29:45
(2 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.185.247.54 (DE/Ge ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.185.247.54 (DE/Germany/54.247.185.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇫🇮
sibahota
2026-10-09 01:28:17
(2 days ago)
34.185.247.54 - - [09/Oct/2026:01:28:15 +0000] apexbyteit.com "GET /secrets.env HTTP/1.1" 403 37 0.0 ...
show more
34.185.247.54 - - [09/Oct/2026:01:28:15 +0000] apexbyteit.com "GET /secrets.env HTTP/1.1" 403 37 0.000 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" - - - "http://apexbyteit.com"
...
show less
Web App Attack
Brute-Force
