🇮🇹
CoreTech srl
2026-11-01 10:42:29
UTC ·
(1 week ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇩🇪
ghostwarriors
2026-10-31 08:53:09
UTC ·
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-30 13:08:02
UTC ·
(1 week ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02]
Hacking
SQL Injection
Web App Attack
2026-10-30 06:54:29
UTC ·
(1 week ago)
Aggressive web scan
Web App Attack
🇬🇧
noise.agency
2026-10-30 06:37:50
UTC ·
(1 week ago)
95.177.87.69 (AT/Austria/unn-95-177-87-69.datapacket.com), more than 30 Apache 404 hits
Hacking
🇺🇸
maxasp.net
2026-10-30 06:13:40
UTC ·
(1 week ago)
F5 Connection Limit to alp-ssl1.maximtech.com
DDoS Attack
🇨🇭
4server
2026-10-30 06:06:48
UTC ·
(1 week ago)
[FriOct3007:06:44.4799452026][security2:error][pid3594522:tid3594772][client95.177.87.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[FriOct3007:06:44.4799452026][security2:error][pid3594522:tid3594772][client95.177.87.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"4-server.com\"][uri\"/.aws/credentials\"][unique_id\"auQz9FTDXj_pR1vS3aOA-wAAAFE\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 06:03:48
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 95.177.87.69 (unn-95-177-87-69.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:03:44.440472 2026] [security2:error] [pid 27455:tid 27455] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 95.177.87.69 (unn-95-177-87-69.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:03:44.440472 2026] [security2:error] [pid 27455:tid 27455] [client 95.177.87.69:52676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3wf.com"] [uri "/.env"] [unique_id "auQzQPGfxz7dYOTSTV4yXQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EnthecSolutions
2026-10-30 06:01:40
UTC ·
(1 week ago)
Detected by Enthec Solutions. | Attempts: 480 in 24h | Target port: 80
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 05:18:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 95.177.87.69 (unn-95-177-87-69.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:18:13.244235 2026] [security2:error] [pid 19107:tid 19107] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 95.177.87.69 (unn-95-177-87-69.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:18:13.244235 2026] [security2:error] [pid 19107:tid 19107] [client 95.177.87.69:65085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3905ccn.org"] [uri "/.env"] [unique_id "auQolUYTJgRPlBwUINZKVQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-30 05:07:02
UTC ·
(1 week ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack
🇩🇪
EGP Abuse Dept
2026-10-30 04:29:16
UTC ·
(1 week ago)
Scanning for web/db/file exploits on www.3-dts.com
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 04:28:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 95.177.87.69 (unn-95-177-87-69.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 00:28:54.299244 2026] [security2:error] [pid 7004:tid 7004] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 95.177.87.69 (unn-95-177-87-69.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 00:28:54.299244 2026] [security2:error] [pid 7004:tid 7004] [client 95.177.87.69:51998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3-6trucking.com"] [uri "/.env"] [unique_id "auQdBtpyXjHvQIQLoM_EVAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-10-30 04:13:57
UTC ·
(1 week ago)
(security_scan) Sensitive File Scan Blocked 95.177.87.69 (AT/Austria/unn-95-177-87-69.datapacket.com)
Hacking
🇳🇱
Site.eu
2026-10-30 04:12:57
UTC ·
(1 week ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
