|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
rh24
|
|
Blacklisted for CAPTCHA_DOS_ALERT after 101 captcha requests
|
DDoS Attack
Web App Attack
|
|
|
Anonymous
|
|
| Multiple common web attacks from same source ip. (multiple servers)
|
Web App Attack
Hacking
SQL Injection
|
|
|
🇺🇸
jormaster3k
|
|
Attack against Apache (too many 404s)
|
Web App Attack
|
|
|
🇳🇱
0xffffffff
|
|
[2026-09-16 08:14:23.999051] [authz_core:error] [pid 214498:tid 131437815039680] [client 34.27.234.4 ...
show more
[2026-09-16 08:14:23.999051] [authz_core:error] [pid 214498:tid 131437815039680] [client 34.27.234.44:0] AH01630: client denied by server configuration: /var/www/*/.vite , error_notes:config-files , URI:'/.vite/manifest.json'
[2026-09-16 08:14:24.001109] [authz_core:error] [pid 214498:tid 131438008276672] [client 34.27.234.44:0] AH01630: client denied by server configuration: /var/www/*/build , error_notes:config-files , URI:'/build/manifest.json'
[2026-09-16 08:14:24.015289] [authz_core:error] [pid 214499:tid 131437815039680] [client 34.27.234.44:0] AH01630: client denied by server configuration: /var/www/*/rclone.conf , error_notes:sensitive-files , URI:'/rclone.conf'
[2026-09-16 08:14:24.016048] [authz_core:error] [pid 214498:tid 131437983098560] [client 34.27.234.44:0] AH01630: client denied by server configuration: /var/www/*/dist , error_notes:config-files , URI:'/dist/manifest.json'
[2026-09-16 08:14:24.017759] [authz_core:error] [pid 214498:tid 131437999883968] [client 34.27.234.44:0] AH01630: client
show less
|
Web App Attack
Bad Web Bot
|
|
|
Anonymous
|
|
IP matched detection query more than 2 hosts and only bad rq long ban.
|
Brute-Force
Web App Attack
Hacking
|
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
|
🇦🇺
rubixstudios
|
|
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇳🇱
Alt255
|
|
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.27.234.44 - - \[16/Sep/2026:04:49:14 +0200\] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 2108 "-" "DuckAssistBot/1.1 \(https://duckduckgo.com/duckassistbot\)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
IP banned by Fail2Ban in jail nginx-abusive-ips
|
Web App Attack
Brute-Force
Bad Web Bot
|
|
|
🇫🇷
MatStef132
|
|
MatShield L7: blocked on mathost.eu (suspicious behaviour)
|
DDoS Attack
|
|
|
🇩🇪
larse99
|
|
Detected Scanning / Hacking activity
|
Port Scan
Hacking
|
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
|
🇺🇸
kbeezie
|
|
34.27.234.44 - - [15/Sep/2026:20:18:42 -0400] "POST /graphql HTTP/1.1" 429 564 "https://karlblessing ...
show more
34.27.234.44 - - [15/Sep/2026:20:18:42 -0400] "POST /graphql HTTP/1.1" 429 564 "https://karlblessing.com" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.27.234.44 - - [15/Sep/2026:20:18:42 -0400] "GET /wp-json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.27.234.44 - - [15/Sep/2026:20:18:42 -0400] "GET /debug/vars HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.27.234.44 - - [15/Sep/2026:20:18:42 -0400] "GET /__/firebase/init.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.27.234.44 - - [15/Sep/2026:20:18:42 -0400] "POST /api/graphql HTTP/1.1" 429 564 "https://karlblessing.com" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
show less
|
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.27.234.44 (44.234.27.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.27.234.44 (44.234.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:02:00.322817 2026] [security2:error] [pid 12524:tid 12544] [client 34.27.234.44:37492] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||joeandlane.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joeandlane.com"] [uri "/z9x8c7v6b5-debug-trigger-joeandlane.com"] [unique_id "aqnceLlj8sLycv4Ch6F-nwAAAI8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|