🇳🇱
Savvii
2026-06-16 21:39:16
(2 hours ago)
10 attempts against mh-misc-ban on frost
Web App Attack
🇨🇳
pengpeng
2026-05-08 20:12:14
(1 month ago)
monitor: on VM-0-7-ubuntu | port: 43453 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show more
monitor: on VM-0-7-ubuntu | port: 43453 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇮🇳
liveaspankaj
2026-04-17 22:34:10
(1 month ago)
DDoS attack: 153 requests in 5m (GET / or repair.php).
DDoS Attack
2026-04-02 08:00:30
(2 months ago)
BruteForce IMAP/POP3/SMTP
Brute-Force
🇮🇩
David Koswari
2026-03-25 06:55:00
(2 months ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇺🇸
r3versedk
2026-03-16 03:18:39
(3 months ago)
🛡️ Automated Threat Report from maxjensen.dk
🎯 Attack Type: Botnet Fingerprint
🚨 Severity: CRITICAL ...
show more
🛡️ Automated Threat Report from maxjensen.dk
🎯 Attack Type: Botnet Fingerprint
🚨 Severity: CRITICAL
📊 Threat Score: 95/100
📈 Total Attacks: 410 (database verified, seen over today)
🔍 Peak Score: 95/100
🎯 Common Types: Botnet Fingerprint(1x)
🔍 Fingerprint: 9f96b00ce11bc787
🤖 AI/ML: 🤝 Multi-Model Consensus (neural-network, q-learning, gpt) - 🧠 NN (55%): throttle (94.9%) | 🎮 QL (23%): block (75.0%) | 🤖 Claude (23%): monitor (70.0%) | ⚖️ dynamic+boosted weights...
Detected: 2026-03-16T03:18:39.214Z
show less
Bad Web Bot
🇺🇸
Penny Packer
2026-03-15 22:13:03
(3 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 22:04:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.86.201.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.86.201.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 18:04:03.436407 2026] [security2:error] [pid 31506:tid 31506] [client 45.86.201.61:52475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindtoken.app"] [uri "/backups/sftp-config.json"] [unique_id "abcs04GkuJI15af9H4pGIAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-02-19 04:12:05
(3 months ago)
/backup/directory.tar
Hacking
Web App Attack
🇺🇸
Penny Packer
2026-02-18 12:26:34
(3 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2026-02-16 08:26:05
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.86.201.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.86.201.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 03:25:59.149282 2026] [security2:error] [pid 22895:tid 22895] [client 45.86.201.61:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kryptonome.com"] [uri "/sftp-config.json"] [unique_id "aZLUl0IJjxnHMLQuM227agAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hbrks
2026-02-16 08:23:13
(4 months ago)
1 attack(s) detected, such as these: {"event":"web_block","ip":"45.86.201.61","host":"marche-be.com" ...
show more
1 attack(s) detected, such as these: {"event":"web_block","ip":"45.86.201.61","host":"marche-be.com","request":"GET / HTTP/1.1","user_agent":"","reason":"service:unknow","timestamp":"2026-02-16T08:23:13 00:00","logentry":"marche-be.com 45.86.201.61 - - [16/Feb/2026:08:23:13 0000] GET / HTTP/1.1 444 0 - - - matched:service:unknow"} * Report Details *: https://p4u.xyz/IKLC7PJGI8F/1* IP Details *: https://p4u.xyz/IKLC7PJGI8F/2
show less
Web Spam
Hacking
Bad Web Bot
🇯🇵
Valhalla
2026-02-13 11:46:27
(4 months ago)
/bak/backup.zip
Hacking
Web App Attack
🇳🇿
Antinson
2026-02-09 05:03:01
(4 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-08 16:25:51
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 45.86.201.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.86.201.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 11:25:46.121899 2026] [security2:error] [pid 13062:tid 13062] [client 45.86.201.61:41021] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||headcount.dev|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "headcount.dev"] [uri "/backups/www.sql"] [unique_id "aYi5CkKRq-79qdxxxkPhZgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack