🇳🇱
Alt255
2026-10-23 09:13:13
(3 hours ago)
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.3.34.39 - - [23/Oct/2026:11:13:06 +0200] "GET /.env.orig HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 00:11:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.39 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:11:34.661934 2026] [security2:error] [pid 19671:tid 19870] [client 45.3.34.39:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.uoexpanse.com"] [uri "/.git/config.old"] [unique_id "atgDNnbSFCl6XaaPBTfnKAAAAhQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-15 21:59:42
(1 week ago)
Auto-ban: >3000 req/min op 2026-10-15
Web App Attack
SSH
Hacking
🇨🇦
Kacelly Nima
2026-09-21 05:00:47
(1 month ago)
Bad Web Bot
Blog Spam
Brute-Force
DDoS Attack
DNS Compromise
DNS Poisoning
Email Spam
Exploited Host
Fraud Orders
Fraud VoIP
FTP Brute-Force
Hacking
IoT Targeted
Open Proxy
Phishing
Ping of Death
Port Scan
Spoofing
SQL Injection
SSH
VPN IP
Web App Attack
Web Spam
🇺🇸
drewf.ink
2026-09-04 04:54:10
(1 month ago)
[04:54] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[04:54] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇬🇧
Oakley
2026-07-15 17:58:32
(3 months ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇹🇼
kk_it_man
2026-06-23 01:13:13
(4 months ago)
ET WEB_SERVER Possible SQL Injection SELECT CAST in HTTP URI
Port Scan
🇮🇩
Burayot
2026-05-12 01:21:26
(5 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.34.39 (US/United States/-): 2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.34.39 (US/United States/-): 2 in the last 3600 secs
show less
Web App Attack
2026-04-10 08:07:15
(6 months ago)
Forum/form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(6 months ago)
"DDoS against public endpoint"
DDoS Attack
2026-02-23 15:03:51
(7 months ago)
Forum/form spam
Web Spam
🇬🇧
relianoid.com
2026-02-15 14:33:12
(8 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
mnsf
2026-02-14 03:05:36
(8 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 12:47:03
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.39 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 07:46:58.523771 2026] [security2:error] [pid 32464:tid 32464] [client 45.3.34.39:43823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "midcityrotary.org"] [uri "/.env"] [unique_id "aY8dQu_R3UhZ3xHL1ZhypAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:55:01
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.39 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:54:56.004177 2026] [security2:error] [pid 25589:tid 25589] [client 45.3.34.39:22607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metalgecko.com"] [uri "/backup/.git/config"] [unique_id "aY7m4EPEnvj-rPGzcSthrAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack