"GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck ...
show more"GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
Honeypot detection: web application attack. 3 events observed. Reported automatically from a honeypo ...
show moreHoneypot detection: web application attack. 3 events observed. Reported automatically from a honeypot sensor.
show less
Repeated requests for suspicious nonexistent URLs, for example: / (HTTP/1.1 port 443, bogus vhost, u ...
show moreRepeated requests for suspicious nonexistent URLs, for example: / (HTTP/1.1 port 443, bogus vhost, user agent: "Mozilla/5.0 (compatible)")
show less
[probe-44-49] 2026-10-08 06:56:40, Client: 34.76.171.31, Protocol: 6, Unauthorized activity to HTTP: ...
show more[probe-44-49] 2026-10-08 06:56:40, Client: 34.76.171.31, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
[Thu Oct 08 06:57:49.811376 2026] [security2:error] [pid 814254:tid 814254] [client 34.76.171.31:574 ...
show more[Thu Oct 08 06:57:49.811376 2026] [security2:error] [pid 814254:tid 814254] [client 34.76.171.31:57446] [client 34.76.171.31] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asc-7Rwp8rLxFi9iddMoBAAAAAU"]
[Thu Oct 08 06:57:51.386759 2026] [security2:error] [pid 814256:tid 814256] [client 34.76.171.31:57456] [client 34.76.171.31] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "
...
show less
Hacking
Web App Attack
Anonymous
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show moreProbing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Oct 8, 06:52 UTC. Origin: Belgium, Brussels.
show less
Hacking
Bad Web Bot
Web App Attack
Anonymous
34.76.171.31 - - [08/Oct/2026:08:43:22 +0200] "GET / HTTP/1.1" 403 5692 "-" "Mozilla/5.0 (Windows NT ...
show more34.76.171.31 - - [08/Oct/2026:08:43:22 +0200] "GET / HTTP/1.1" 403 5692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" ...
show less
Web App Attack
Showing 1 to
15
of 33 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩