🇳🇿
Antinson
2026-09-07 15:38:24
UTC ·
(2 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
FreeMyIP
2026-09-07 14:47:34
UTC ·
(2 months ago)
Automated fail2ban report: web application attack / scanning for exploitable paths.
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-07 09:43:58
UTC ·
(2 months ago)
105 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-06 23:14:24
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.34.229.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 19:14:16.138845 2026] [security2:error] [pid 24156:tid 24156] [client 34.34.229.98:8643] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.229.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 19:14:16.138845 2026] [security2:error] [pid 24156:tid 24156] [client 34.34.229.98:8643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.247"] [uri "/.htaccess59c7231841c64e66986e9608fab61841"] [unique_id "ap3zyHOGSPdXYyh4LQEIJAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
0xffffffff
2026-09-06 18:51:21
UTC ·
(2 months ago)
[2026-09-06 21:51:15.351442] [authz_core:error] [pid 1447578:tid 132047578306240] [client 34.34.229.98:45306] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-09-06 21:51:18.588058] [authz_core:e ...
show more
[2026-09-06 21:51:15.351442] [authz_core:error] [pid 1447578:tid 132047578306240] [client 34.34.229.98:45306] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-09-06 21:51:18.588058] [authz_core:error] [pid 2672312:tid 132048215856832] [client 34.34.229.98:20171] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-09-06 21:51:19.025180] [authz_core:error] [pid 1447578:tid 132048140322496] [client 34.34.229.98:57406] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-09-06 21:51:19.780477] [authz_core:error] [pid 1447578:tid 132048215856832] [client 34.34.229.98:42318] AH01630: client denied by server configuration: /var/www/html/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-09-06 21:51:19.987609] [authz_core:error] [pid 1447578:tid 132048207464128] [client 34.34.229.98:57406] AH01630: client denied by server configuration: /var/www/html/
show less
Web App Attack
Bad Web Bot
🇬🇧
OptimusGO
2026-09-06 18:24:50
UTC ·
(2 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-09-06 19:24:50 UTC
Log evidence:
34.34.229.98 - - [06/Sep/2026:19:24:48 +0100] "HEAD / HTTP/1.1" 200 0 "-" "Python-urllib/3.14"
09/06/202 ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-09-06 19:24:50 UTC
Log evidence:
34.34.229.98 - - [06/Sep/2026:19:24:48 +0100] "HEAD / HTTP/1.1" 200 0 "-" "Python-urllib/3.14"
09/06/2026-19:24:48.971232 [**] [1:1000201:1] SCANNER: Bot-like User-Agent Detected [**] [Classification: Attempted Information Leak] [Priority: 2] {TCP} 34.34.229.98:4832 -> 185.127.18.66:80
show less
Port Scan
Brute-Force
🇳🇿
Antinson
2026-09-03 07:57:03
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇳🇿
Antinson
2026-09-03 01:08:27
UTC ·
(2 months ago)
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇳🇿
Antinson
2026-08-31 03:28:52
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇫🇷
masterguru
2026-08-30 15:23:15
UTC ·
(2 months ago)
Host header is a numeric IP address. Pattern match "^ (920350-131)
Hacking
Bad Web Bot
🇺🇸
jormaster3k
2026-08-29 02:07:55
UTC ·
(2 months ago)
Attack against Apache (too many 404s)
Web App Attack
🇳🇿
Antinson
2026-08-28 23:22:30
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-28 21:26:39
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.34.229.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 17:26:34.559992 2026] [security2:error] [pid 29806:tid 29886] [client 34.34.229.98:32396] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 34.34.229.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 17:26:34.559992 2026] [security2:error] [pid 29806:tid 29886] [client 34.34.229.98:32396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.14"] [uri "/.htaccess0b6f073861db4df9b9edf720e577cf2c80caac41840243ca93ff185d9386236986cb789ba25f484e91a48106fcdaf012"] [unique_id "apH9Cr4ky2dJ6hCaiSCF1QAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
kalaukan
2026-08-27 10:16:33
UTC ·
(2 months ago)
Honeypot observed 10 unauthorized events; sensors=OpenCanary; destination_ports=80; observation_window=2026-08-27T10:16:33.254443+00:00..2026-08-27T10:16:45.189964+00:00.
Port Scan
🇦🇺
AWW-Admin
2026-08-27 02:48:59
UTC ·
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.34.229.98 (US/United States/-)
SQL Injection