🇩🇪
bazter.pro
2026-11-01 20:22:26
(51 minutes ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇺🇸
its101
2026-11-01 20:10:08
(1 hour ago)
Automated detection by LockdownAccess security system. Attack type(s): env_grab, rce, path_traversal, git_exposure, config_probe, framework_probe. Reason: Nginx: env_grab attack. Path targeted: unknown. Blocked in Cloudflare.
Web App Attack
Exploited Host
🇺🇸
Ar1s
2026-11-01 19:39:01
(1 hour ago)
[1:2061026] ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) ::: Port: 80/TCP
Exploited Host
2026-11-01 18:09:05
(3 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇺🇸
JustMeHere
2026-11-01 16:29:32
(4 hours ago)
[Sun Nov 01 11:29:28.243730 2026] [security2:error] [pid 52987:tid 53016] [client 34.142.202.13:50604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/act ...
show more
[Sun Nov 01 11:29:28.243730 2026] [security2:error] [pid 52987:tid 53016] [client 34.142.202.13:50604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "login.yorknation.com"] [uri "/"] [unique_id "audo6GwD4CAdB7UuSbJTuwAAAME"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 12:42:27
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.142.202.13 (13.202.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 07:42:22.303342 2026] [security2:error] [pid 22951:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.202.13 (13.202.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 07:42:22.303342 2026] [security2:error] [pid 22951:tid 22951] [client 34.142.202.13:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.local639.com"] [uri "/static../.env"] [unique_id "auczruT2FrSgSxpMMTqW5gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-01 06:39:37
(14 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
dynamix
2026-11-01 06:20:27
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
masterguru
2026-11-01 05:51:10
(15 hours ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
🇲🇾
Rizzy
2026-11-01 03:29:56
(17 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-11-01 02:55:19
(18 hours ago)
{"level":"info","ts":1793501717.0058715,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.142.202.13","remote_port":"35206","client_ip":"34.142.202.13","proto":"HTTP/2.0","method":"GET","host":"status.generatorlanding ...
show more
{"level":"info","ts":1793501717.0058715,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.142.202.13","remote_port":"35206","client_ip":"34.142.202.13","proto":"HTTP/2.0","method":"GET","host":"status.generatorlanding.com","uri":"/","headers":{"Upgrade-Insecure-Requests":["1"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-Site":["none"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Platform":["\"Windows\""],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:midd
...
show less
DDoS Attack
Web App Attack
2026-11-01 02:34:43
(18 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇩🇪
Callum
2026-11-01 02:04:45
(19 hours ago)
probing for exposed files and admin pages and path traversal: 204 attempts within 1 minutes, seen by web server log
Web App Attack
🇹🇷
Jova
2026-11-01 00:38:33
(20 hours ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇩🇪
bazter.pro
2026-11-01 00:07:09
(21 hours ago)
Fail2Ban: apache-ratelimit - 20 failures
Port Scan
Bad Web Bot
Web App Attack
