|
๐ฉ๐ช
www.Examensfragen.de
|
|
|
Web Spam
Bad Web Bot
|
|
๐ฏ๐ต
Tom Tamagawa
|
|
Probing for vulnerabilities
|
Bad Web Bot
Web App Attack
|
|
๐ฎ๐ณ
evicky2002
|
|
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking
Brute-Force
SSH
|
|
๐ณ๐ฑ
Savvii
|
|
20 attempts against mh-misbehave-ban on choy
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban; Events=4; Hosts=incognet.io; Paths=/@fs/proc/self/cwd/.env?raw??,/__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban; Events=4; Hosts=incognet.io; Paths=/@fs/proc/self/cwd/.env?raw??,/__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc,/__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc,/__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc; Country=BE; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
|
Port Scan
Web App Attack
|
|
๐ณ๐ฑ
javierin
|
|
34.140.212.114 - javierin.com - - [11/Sep/2026:04:29:03 +0000] "GET /userfiles?path=../../../.env HTTP/2.0" 404 2298 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.140.212.114 - javierin.com - - [11/Sep/2026:04:29:03 +0000] ...
show more
34.140.212.114 - javierin.com - - [11/Sep/2026:04:29:03 +0000] "GET /userfiles?path=../../../.env HTTP/2.0" 404 2298 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.140.212.114 - javierin.com - - [11/Sep/2026:04:29:03 +0000] "GET /userfiles?path=../../.env HTTP/2.0" 404 2298 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
|
Web App Attack
Hacking
|
|
๐ฒ๐พ
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet.io; Paths=/.env?import&url&inline,/admin%2F.env,/api%2F.env,/dashboard%2F.env,/settings%2F.env; Country=BE; ASN=396982 GOOGLE-CLOU ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet.io; Paths=/.env?import&url&inline,/admin%2F.env,/api%2F.env,/dashboard%2F.env,/settings%2F.env; Country=BE; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
|
Hacking
Web App Attack
|
|
๐ฎ๐น
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-09-11 05:59:33,542 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.9.31 - 2026-09-11 05:59:33cloudlinux2 fail2ban: 2026-09-11 05:59:37,826 fail2ban.filter [1606]: INFO [recidive] Found 34 ...
show more
cloudlinux2 fail2ban: 2026-09-11 05:59:33,542 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.9.31 - 2026-09-11 05:59:33cloudlinux2 fail2ban: 2026-09-11 05:59:37,826 fail2ban.filter [1606]: INFO [recidive] Found 34.176.9.31 - 2026-09-11 05:59:37cloudlinux2 fail2ban: 2026-09-11 05:59:37,336 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.9.31 - 2026-09-11 05:59:37cloudlinux2 fail2ban: 2026-09-11 05:59:37,125 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.9.31 - 2026-09-11 05:59:37cloudlinux2 fail2ban: 2026-09-11 05:59:37,756 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.9.31 - 2026-09-11 05:59:37cloudlinux2 fail2ban: 2026-09-11 05:59:37,821 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Ban 34.176.9.31cloudlinux2 fail2ban: 2026-09-11 05:59:37,545 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.9.31 - 2026-09-11 05:59:37cloudlinux2 fail2ban: 2026-09-11 06:00:20,
show less
|
Brute-Force
|
|
๐ซ๐ท
mail.avx.gr
|
|
(nginxTRAVERSAL) nginx path traversal probe detected from 34.140.212.114 (BE/Belgium/Brussels Capital/Brussels/114.212.140.34.bc.googleusercontent.com)
|
Hacking
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.140.212.114 (114.212.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:08:04.168841 2026] [security2:error] [pid 20792:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 34.140.212.114 (114.212.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:08:04.168841 2026] [security2:error] [pid 20792:tid 20792] [client 34.140.212.114:35598] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hakkawok.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hakkawok.com"] [uri "/z9x8c7v6b5-debug-trigger-hakkawok.com"] [unique_id "aqNwlKHjKB5AY63WJq0v6QAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Banned by Fail2Ban on server
|
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.140.212.114 (114.212.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 22:46:01.140111 2026] [security2:error] [pid 29678:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.212.114 (114.212.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 22:46:01.140111 2026] [security2:error] [pid 29678:tid 29678] [client 34.140.212.114:42760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldengatecorgis.org"] [uri "/static../.env"] [unique_id "aqNraY-GFJ7cdwappbSJzAAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ฉ๐ช
bazter.pro
|
|
Fail2Ban: plesk-bot-aggressive - 15 failures
|
Port Scan
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|