🇳🇱
homeshowdomain.nl
2026-06-15 22:02:05
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇳🇱
Savvii
2026-06-15 14:38:53
(4 days ago)
20 attempts against mh-misbehave-ban on lime
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Stefan Dreher
2026-06-15 14:33:44
(4 days ago)
34.19.169.114 - - [15/Jun/2026:16:33:43 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03K\xCA\xF ...
show more
34.19.169.114 - - [15/Jun/2026:16:33:43 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03K\xCA\xF6\xD6\x84" 400 157 "-" "-"
34.19.169.114 - - [15/Jun/2026:16:33:43 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03 \xC6q\xB1\x1F\xF6$3\xDA\x11\xEA\xB5&g\xE2\xC3\x09Y\x17\x11\xBA\xAA\xD9\xC4\xFEf\xE8CHMeZ ]\xEDr\xF9\xA4iH \xDD\xD9x\xC9S\xA6%(\xE0\xFF\x0B\xB2aP\xDF\xD1+\xB3\xE9e\xC6" 400 157 "-" "-"
34.19.169.114 - - [15/Jun/2026:16:33:43 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\x12@Y\xD4\xB0_u\x07g\x82\xA3*\x1F\x88\xE1-\xEEA\xEDT\xAA\x1D\xE3\x16\x07\xB0\xB5|>4\x90\xDC \xD9\xAF\x0F|7\xAAX;\x80\xCE\x9A_#^\x9C\x00\xFF\xF7Y\xB8G\xB5\x0C=\xDC\xC8\xD4\xB4\xFB\x17\xDE{\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-"
...
show less
Hacking
Brute-Force
🇩🇪
tinect
2026-06-15 14:29:01
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇳🇱
Savvii
2026-06-15 14:14:14
(4 days ago)
30 attempts against mh-misbehave-ban on glow
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mashamal
2026-06-15 14:00:05
(4 days ago)
Vulnerability Probe
...
Web App Attack
🇫🇷
dynamix
2026-06-15 13:45:15
(4 days ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Savvii
2026-06-15 13:32:04
(4 days ago)
30 attempts against mh-misbehave-ban on bean
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-06-15 13:31:47
(4 days ago)
Too many 404 requests [BY]
Web App Attack
🇨🇿
rawnullbyte
2026-06-15 13:06:49
(4 days ago)
🚨 Honeypot triggered! 🖥️ System: NPot 🎯 Target: Unknown 🛣️ Path: /api/.git/config 👤 Attacker IP: 34. ...
show more
🚨 Honeypot triggered! 🖥️ System: NPot 🎯 Target: Unknown 🛣️ Path: /api/.git/config 👤 Attacker IP: 34.19.169.114 ⏰ Time: 2026-06-15 13:06:48 📡 User-Agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:24.0) Gecko/20100101 Firefox/24.0 SeaMonkey/2.21
show less
Web App Attack
🇨🇭
ALPHANET
2026-06-15 11:21:38
(4 days ago)
web exploits
Hacking
Exploited Host
Web App Attack
🇩🇪
grassau.com
2026-06-15 10:00:44
(4 days ago)
*Port Scan* detected from 34.19.169.114 (CA/Canada/Quebec/Montreal/114.169.19.34.bc.googleuserconten ...
show more
*Port Scan* detected from 34.19.169.114 (CA/Canada/Quebec/Montreal/114.169.19.34.bc.googleusercontent.com).
show less
Port Scan
🇳🇱
Site.eu
2026-06-15 02:50:36
(5 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-06-15 01:42:50
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.19.169.114 (114.169.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.169.114 (114.169.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:42:42.248531 2026] [security2:error] [pid 20958:tid 20958] [client 34.19.169.114:50104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blank.lindenwoodpark.org"] [uri "/frontend/.env"] [unique_id "ai9YkqN-yyAfoxmdv102OQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-15 01:34:16
(5 days ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-195)
show less
Hacking