🇺🇸
Starburst SysOp Team
2026-08-31 05:24:20
UTC ·
(2 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)
Hacking
Bad Web Bot
🇬🇧
blik2108
2026-08-30 21:00:33
UTC ·
(2 months ago)
[Sun Aug 30 22:00:29.368879 2026] [authz_core:error] [pid 2677473:tid 2677473] [client 34.34.229.19:14770] AH01630: client denied by server configuration: /var/www/beta.sleepylizard.com/.htaccess59f3085a207840828b823290773f43b4
[Sun Aug 30 22:00:29.3 ...
show more
[Sun Aug 30 22:00:29.368879 2026] [authz_core:error] [pid 2677473:tid 2677473] [client 34.34.229.19:14770] AH01630: client denied by server configuration: /var/www/beta.sleepylizard.com/.htaccess59f3085a207840828b823290773f43b4
[Sun Aug 30 22:00:29.382075 2026] [authz_core:error] [pid 2677463:tid 2677463] [client 34.34.229.19:20649] AH01630: client denied by server configuration: /var/www/beta.sleepylizard.com/.htaccess03d6a317f25e425ca4fec26545deb11db57829a18e3947dda6c7ee3f97368276ea10d036d9cb4edca29fe691b8e077c6
[Sun Aug 30 22:00:30.181354 2026] [authz_core:error] [pid 2677463:tid 2677463] [client 34.34.229.19:20649] AH01630: client denied by server configuration: /var/www/beta.sleepylizard.com/api/.htaccessca30dbc56d83426abb3ec615313ce6cd
[Sun Aug 30 22:00:30.181518 2026] [authz_core:error] [pid 2677473:tid 2677473] [client 34.34.229.19:14770] AH01630: client denied by server configuration: /var/www/beta.sleepylizard.com/api/.htaccessb9e7e9d709454f3faaac34431f0c718e3dd273a12418434e8
...
show less
Brute-Force
🇨🇦
SSH-Admin
2026-08-28 04:00:05
UTC ·
(2 months ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-08-28 00:06:26
UTC ·
(2 months ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
🇫🇷
SSH-Admin
2026-08-27 23:00:42
UTC ·
(2 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇫🇷
dynamix
2026-08-27 08:04:30
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇩🇪
Stefan Dreher
2026-08-27 04:15:38
UTC ·
(2 months ago)
34.34.229.19 - - [27/Aug/2026:06:15:37 +0200] "GET /temp HTTP/1.1" 404 153 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:06:15:37 +0200] "GET /cgi-bin HTTP/1.1" 404 153 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:06:15:37 +0200] " ...
show more
34.34.229.19 - - [27/Aug/2026:06:15:37 +0200] "GET /temp HTTP/1.1" 404 153 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:06:15:37 +0200] "GET /cgi-bin HTTP/1.1" 404 153 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:06:15:37 +0200] "GET /a2f3166c26f8488fb19239e644e39428 HTTP/1.1" 404 153 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:06:15:37 +0200] "GET /admin HTTP/1.1" 404 153 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:06:15:37 +0200] "GET /.htaccessbbdd39dc93c24091882b5da62918893db9c8225c911a4fbab48513b48865595e2d4beb7089a84fafba7b9f9d97d12cb2 HTTP/1.1" 404 153 "-" "feroxbuster/2.13.1"
...
show less
Hacking
Brute-Force
🇰🇷
MW
2026-08-26 23:47:11
UTC ·
(2 months ago)
34.34.229.19 - - [27/Aug/2026:08:47:02 +0900] "GET /robots.txt HTTP/1.1" 404 5770 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:08:47:03 +0900] "GET /ce030e5169d740fbbdcacbb1b5e8701b HTTP/1.1" 404 459 "-" "feroxbuster/2.13.1"
34.34.229.19 - ...
show more
34.34.229.19 - - [27/Aug/2026:08:47:02 +0900] "GET /robots.txt HTTP/1.1" 404 5770 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:08:47:03 +0900] "GET /ce030e5169d740fbbdcacbb1b5e8701b HTTP/1.1" 404 459 "-" "feroxbuster/2.13.1"
34.34.229.19 - - [27/Aug/2026:08:47:04 +0900] "GET /3a337962135244d0867c2f2d721c5beaba9a731fe7274fa6981caa49e845197c6c1289e375d14d7899643e65d7635a06 HTTP/1.1" 404 459 "-" "feroxbuster/2.13.1"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 20:59:55
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.34.229.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 16:59:49.756836 2026] [security2:error] [pid 31697:tid 31697] [client 34.34.229.19:24151] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.229.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 16:59:49.756836 2026] [security2:error] [pid 31697:tid 31697] [client 34.34.229.19:24151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.138"] [uri "/.htaccessf8bdb15110084903af7e4ff53485ec7d040055e8ca8a4a6ca43fe4f755e2009f7a77c758d2fa4a26bd5656cca471273e"] [unique_id "ao9TxWD9oc3oxbvCAIVhCQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-08-26 03:11:40
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇨🇱
ovallevelasquezanibal
2026-08-21 12:00:20
UTC ·
(2 months ago)
Detectado por Wazuh SIEM en api-ux.com | Alertas: 67 | Nivel max: 10 | Agentes: web-apiux-2025 | Suspicious URL access.; Web server 400 error code.; Multiple web server 400 error codes from same source ip.
Web App Attack
🇳🇿
Antinson
2026-08-20 22:52:59
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
Anonymous
2026-08-07 01:26:28
UTC ·
(3 months ago)
apache-auth
Brute-Force
Web App Attack
🇦🇺
afleventoffice.com.au
2026-08-05 20:31:20
UTC ·
(3 months ago)
GET /adminffb61865140d4200a7ad179beba79938 HTTP/1.1
Web App Attack
🇧🇪
cmbplf
2026-07-06 16:43:13
UTC ·
(4 months ago)
104 requests with url.path *.git/*
Brute-Force
Bad Web Bot