🇫🇷
dynamix
2026-09-01 11:47:19
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-08-31 02:11:57
UTC ·
(2 months ago)
34.34.229.38 - - [31/Aug/2026:04:11:56 +0200] "GET /robots.txt HTTP/1.1" 404 162 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [31/Aug/2026:04:11:56 +0200] "GET /50bcca581ac04b7487232aafd55dea99 HTTP/1.1" 404 162 "-" "feroxbuster/2.13.1"
34.34.229.38 - - ...
show more
34.34.229.38 - - [31/Aug/2026:04:11:56 +0200] "GET /robots.txt HTTP/1.1" 404 162 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [31/Aug/2026:04:11:56 +0200] "GET /50bcca581ac04b7487232aafd55dea99 HTTP/1.1" 404 162 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [31/Aug/2026:04:11:56 +0200] "GET /21606139571e41d9b226eefe57028535e5a3f28dcf344b708a0145d9ff83b9d40709aa8f9b61476e9f260948caa89f8c HTTP/1.1" 404 162 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [31/Aug/2026:04:11:56 +0200] "GET /.htaccess24150480392649618c145d12d6fe5766e756a5d5de264525baf049795c51c39525f5111991db4d979aa9627fb76c0236 HTTP/1.1" 404 162 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [31/Aug/2026:04:11:56 +0200] "GET /.htaccessde8859df15af447db30082243afd78ae HTTP/1.1" 404 162 "-" "feroxbuster/2.13.1"
...
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
🇳🇿
Antinson
2026-08-30 14:43:27
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
brantknudson.org
2026-08-30 14:25:11
UTC ·
(2 months ago)
Not GET, path='HEAD / HTTP/1.1'
Web App Attack
Hacking
🇺🇸
jormaster3k
2026-08-30 12:24:24
UTC ·
(2 months ago)
Attack against Apache (too many 404s)
Web App Attack
🇺🇸
IndigoRidge
2026-08-30 10:29:03
UTC ·
(2 months ago)
[30/Aug/2026:06:29:01.301074 --0400] apQF7TlC6LLGDAh0N5MkgwAAAIc 34.34.229.38 59444 127.0.0.1 7080
[30/Aug/2026:06:29:01.301204 --0400] apQF7Wf2e9TmxyZCxfhE1gAAAAY 34.34.229.38 59456 127.0.0.1 7080
[30/Aug/2026:06:29:03.275724 --0400] apQF7zlC6LLGDAh ...
show more
[30/Aug/2026:06:29:01.301074 --0400] apQF7TlC6LLGDAh0N5MkgwAAAIc 34.34.229.38 59444 127.0.0.1 7080
[30/Aug/2026:06:29:01.301204 --0400] apQF7Wf2e9TmxyZCxfhE1gAAAAY 34.34.229.38 59456 127.0.0.1 7080
[30/Aug/2026:06:29:03.275724 --0400] apQF7zlC6LLGDAh0N5MkrwAAAJc 34.34.229.38 60420 127.0.0.1 7080
[30/Aug/2026:06:29:03.284086 --0400] apQF7zlC6LLGDAh0N5MksAAAAJY 34.34.229.38 60434 127.0.0.1 7080
[30/Aug/2026:06:29:03.285907 --0400] apQF72f2e9TmxyZCxfhFAgAAAAM 34.34.229.38 60450 127.0.0.1 7080
...
show less
Web App Attack
🇳🇱
Savvii
2026-08-30 08:22:55
UTC ·
(2 months ago)
15 attempts against mh-modsecurity-ban on hostbillst
Brute-Force
Web App Attack
Anonymous
2026-08-30 08:06:58
UTC ·
(2 months ago)
[da.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env | /app/.env | /api/.env
Hacking
Web App Attack
🇺🇸
IndigoRidge
2026-08-30 06:27:41
UTC ·
(2 months ago)
Knock-Knock HTTP honeypot activity; time=2026-08-30 06:22:28; http_method=HEAD; http_path=/; http_purpose=basic_probe; http_user_agent=Python-urllib/3.14
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 02:22:28
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.34.229.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 22:22:21.090115 2026] [security2:error] [pid 30691:tid 30691] [client 34.34.229.38:57496] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.229.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 22:22:21.090115 2026] [security2:error] [pid 30691:tid 30691] [client 34.34.229.38:57496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.218"] [uri "/.htaccessffb58dff7f924b6292f6858d28270227"] [unique_id "apOT3de44rN_pldW-Cxh_QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
paulo.apoloni
2026-08-29 08:50:12
UTC ·
(2 months ago)
34.34.229.38 - - [29/Aug/2026:05:50:11 -0300] "GET /.htaccessb45b726bd9294fae903e5520161f559c HTTP/1.1" 404 146 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [29/Aug/2026:05:50:11 -0300] "GET /.htaccess6c3d66c85cfe472895b6cafa635c1b475be2ed471dc04c68a482 ...
show more
34.34.229.38 - - [29/Aug/2026:05:50:11 -0300] "GET /.htaccessb45b726bd9294fae903e5520161f559c HTTP/1.1" 404 146 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [29/Aug/2026:05:50:11 -0300] "GET /.htaccess6c3d66c85cfe472895b6cafa635c1b475be2ed471dc04c68a4824e5404e50d03d5916198ab034f6dbf2dcee891afe539 HTTP/1.1" 404 146 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [29/Aug/2026:05:50:12 -0300] "GET /wp-content HTTP/1.1" 404 146 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [29/Aug/2026:05:50:12 -0300] "GET /setup HTTP/1.1" 404 146 "-" "feroxbuster/2.13.1"
34.34.229.38 - - [29/Aug/2026:05:50:12 -0300] "GET /install HTTP/1.1" 404 146 "-" "feroxbuster/2.13.1"
...
show less
Web App Attack
🇬🇷
setupgr
2026-08-29 05:41:49
UTC ·
(2 months ago)
(mod_security) mod_security (id:9999001) triggered by 34.34.229.38 (US/United States/California/Los Angeles/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Aug 29 0 ...
show more
(mod_security) mod_security (id:9999001) triggered by 34.34.229.38 (US/United States/California/Los Angeles/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Aug 29 08:41:47.422271 2026] [security2:error] [pid 754346:tid 754376] [client 34.34.229.38:44951] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^154\\\\.57\\\\.7\\\\.73$" at REQUEST_HEADERS:Host. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "155"] [id "9999001"] [msg "Direct incoming request to server shared IP blocked by admin"] [hostname "154.57.7.73"] [uri "/"] [unique_id "apJxGiZoYLsq9YdNyejL-wAAAIE"]
show less
Port Scan
🇩🇪
Savvii
2026-08-29 03:30:54
UTC ·
(2 months ago)
20 attempts against mh-misbehave-ban on grass
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-08-29 02:31:25
UTC ·
(2 months ago)
Too many 404 requests [BY]
Web App Attack
🇳🇿
Antinson
2026-08-28 23:51:30
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot