🇳🇱
wlt-blocker
2026-10-30 05:17:45
UTC ·
(1 week ago)
Spam with a high level and/or caught by honeypot detected
Email Spam
🇯🇵
HeliJP
2026-10-30 04:26:00
UTC ·
(1 week ago)
Identified as SPAM from IP address 34.65.243.187
Email Spam
🇩🇪
zumbo.net
2026-10-26 06:24:19
UTC ·
(2 weeks ago)
[Mon Oct 26 09:24:18.073839 2026] [proxy_fcgi:error] [pid 893506:tid 893528] [client 34.65.243.187:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 26 09:24:18.129283 2026] [proxy_fcgi:error] [pid 893506:tid 893525] [client 34.65.243.187:0] AH ...
show more
[Mon Oct 26 09:24:18.073839 2026] [proxy_fcgi:error] [pid 893506:tid 893528] [client 34.65.243.187:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 26 09:24:18.129283 2026] [proxy_fcgi:error] [pid 893506:tid 893525] [client 34.65.243.187:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 26 09:24:18.241952 2026] [proxy_fcgi:error] [pid 893505:tid 893513] [client 34.65.243.187:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 26 09:24:18.301495 2026] [proxy_fcgi:error] [pid 893505:tid 893558] [client 34.65.243.187:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 26 09:24:18.447152 2026] [proxy_fcgi:error] [pid 893505:tid 893548] [client 34.65.243.187:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇬🇧
AvonleaConsulting
2026-10-26 05:40:20
UTC ·
(2 weeks ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 00:51:54
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.65.243.187 (187.243.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 20:51:50.142662 2026] [security2:error] [pid 14763:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.243.187 (187.243.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 20:51:50.142662 2026] [security2:error] [pid 14763:tid 14836] [client 34.65.243.187:44514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandbarsteve.com"] [uri "/.git/config"] [unique_id "at1SpqSLd9Ef_FRlQEaiPAAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-24 21:59:59
UTC ·
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-23.
Web App Attack
SSH
Hacking
🇨🇭
zynex
2026-10-23 22:57:00
UTC ·
(2 weeks ago)
URL Probing: /.env
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-23 22:51:24
UTC ·
(2 weeks ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇧🇷
Host One
2026-10-23 22:34:25
UTC ·
(2 weeks ago)
Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /admin/phpinfo.php, /beta/phpinfo.php, /info.php, /phpinfo.php, /phpinfo. ...
show more
Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /admin/phpinfo.php, /beta/phpinfo.php, /info.php, /phpinfo.php, /phpinfo.php.save. Automated report.
show less
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-10-23 21:45:02
UTC ·
(2 weeks ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
2026-10-23 20:10:02
UTC ·
(2 weeks ago)
suspicious request in access.log
Web App Attack
🇫🇮
paissangroup
2026-10-23 17:54:41
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇮🇹
CoreTech srl
2026-10-23 13:29:03
UTC ·
(2 weeks ago)
cloudlinux2 fail2ban: 2026-10-23 15:24:29,378 fail2ban.filter [1633]: INFO [plesk-wordpress] Found 102.254.35.26 - 2026-10-23 15:24:28cloudlinux2 fail2ban: 2026-10-23 15:25:07,129 fail2ban.actions [1633]: NOTICE [plesk-apache] Unba ...
show more
cloudlinux2 fail2ban: 2026-10-23 15:24:29,378 fail2ban.filter [1633]: INFO [plesk-wordpress] Found 102.254.35.26 - 2026-10-23 15:24:28cloudlinux2 fail2ban: 2026-10-23 15:25:07,129 fail2ban.actions [1633]: NOTICE [plesk-apache] Unban 35.234.136.63cloudlinux2 fail2ban: 2026-10-23 15:25:46,351 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 77.244.183.92 - 2026-10-23 15:25:46cloudlinux2 fail2ban: 2026-10-23 15:25:46,338 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 77.244.183.92 - 2026-10-23 15:25:46cloudlinux2 fail2ban: 2026-10-23 15:26:04,157 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.65.243.187 - 2026-10-23 15:26:04cloudlinux2 fail2ban: 2026-10-23 15:26:04,632 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.65.243.187 - 2026-10-23 15:26:04cloudlinux2 fail2ban: 2026-10-23 15:26:04,669 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.65.243.187 - 2026-10-23 15:26:04cloudlinux2 fail2ban: 20
show less
Web App Attack
🇳🇱
Alt255
2026-10-23 12:32:07
UTC ·
(2 weeks ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.65.243.187 - - [23/Oct/2026:14:31:55 +0200] "GET /.git/config HTTP/1.1" 404 22482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.65.243.187 - - [23/Oct/2026:14:31:55 +0200] "GET /.git/config HTTP/1.1" 404 22482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-23 12:30:40
UTC ·
(2 weeks ago)
20 attempts against mh_ha-misbehave-ban on yeti
Brute-Force
Bad Web Bot
Web App Attack
