๐ฉ๐ช
Vegascosmetics
2026-10-26 12:50:10
(4 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after matched multi-pattern attack signature. Evidence: AttackPattern: /\.vite/ (Match: /.vite/)
Hacking
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-26 12:36:42
(4 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-26 11:46:53
(4 days ago)
34.80.126.238 - - [26/Oct/2026:11:46:29 +0000] "GET / HTTP/2.0" 403 38760 "https://wppodcast.fr" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.80.126.238"
34.80.12 ...
show more
34.80.126.238 - - [26/Oct/2026:11:46:29 +0000] "GET / HTTP/2.0" 403 38760 "https://wppodcast.fr" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:11:46:31 +0000] "GET /robots.txt HTTP/2.0" 403 118 "https://wppodcast.fr/robots.txt" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:11:46:31 +0000] "GET /robots.txt HTTP/2.0" 403 118 "https://wppodcast.fr/robots.txt" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:11:46:32 +0000] "GET /sitemap.xml HTTP/2.0" 403 20 "https://wppodcast.fr/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:11:46:33 +0000] "GET /sitemap_index.xml H
...
show less
Web App Attack
๐ง๐ช
cmbplf
2026-10-26 11:07:21
(4 days ago)
11.452 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
๐ง๐ช
voormedia
2026-10-26 10:05:15
(4 days ago)
Accessed trap at '/.aws/config'
Web App Attack
๐บ๐ธ
snappic
2026-10-26 09:32:26
(4 days ago)
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot]
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-26 09:19:19
(4 days ago)
34.80.126.238 - - [26/Oct/2026:09:18:16 +0000] "GET /robots.txt HTTP/2.0" 403 118 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:09:18:16 +0000] "GET /sitemap.xml HTTP/2 ...
show more
34.80.126.238 - - [26/Oct/2026:09:18:16 +0000] "GET /robots.txt HTTP/2.0" 403 118 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:09:18:16 +0000] "GET /sitemap.xml HTTP/2.0" 403 20 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:09:18:17 +0000] "GET /sitemap_index.xml HTTP/2.0" 403 14858 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:09:18:19 +0000] "GET /z9x8c7v6b5-debug-trigger-www.wppodcast.fr HTTP/2.0" 403 14858 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-" edge="34.80.126.238"
34.80.126.238 - - [26/Oct/2026:09:18:20 +0000] "GET /586mbaxtl5kxh9fgymd9/ HTTP/2.0" 403 14858 "ht
...
show less
Web App Attack
๐ฆ๐น
penguin-solutions.at
2026-10-26 09:08:54
(4 days ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-10-26 08:35:24
(4 days ago)
Web App Attack
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-26 08:02:49
(4 days ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
๐ซ๐ฎ
NoaQT
2026-10-26 05:53:07
(4 days ago)
2026-10-26T05:53:07.003493+00:00 ingress-1 haproxy[35723]: 34.80.126.238:43662 [26/Oct/2026:05:53:07.002] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 233/233/0/0/0 0/0 "GET https://grafana.mentis.si/admin HTTP/2.0"
2026-10-26T05:53:07.00 ...
show more
2026-10-26T05:53:07.003493+00:00 ingress-1 haproxy[35723]: 34.80.126.238:43662 [26/Oct/2026:05:53:07.002] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 233/233/0/0/0 0/0 "GET https://grafana.mentis.si/admin HTTP/2.0"
2026-10-26T05:53:07.003521+00:00 ingress-1 haproxy[35723]: 34.80.126.238:43662 [26/Oct/2026:05:53:07.002] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 233/233/0/0/0 0/0 "GET https://grafana.mentis.si/sign-in HTTP/2.0"
2026-10-26T05:53:07.003531+00:00 ingress-1 haproxy[35723]: 34.80.126.238:43662 [26/Oct/2026:05:53:07.002] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 233/233/0/0/0 0/0 "GET https://grafana.mentis.si/login HTTP/2.0"
2026-10-26T05:53:07.003539+00:00 ingress-1 haproxy[35723]: 34.80.126.238:43662 [26/Oct/2026:05:53:07.002] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 233/233/0/0/0 0/0 "GET https://grafana.mentis.si/settings HTTP/2.0"
2026-10-26T05:53:07.003546+00:00 ingress-1 haproxy[35723]: 34.80.126.238:43662 [26/
...
show less
DDoS Attack
๐ซ๐ท
SpaceHost-Server
2026-10-25 23:21:25
(4 days ago)
Brute-Force
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-25 22:08:58
(4 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-25 19:41:21
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.80.126.238 (238.126.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 15:41:18.375002 2026] [security2:error] [pid 29263:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.126.238 (238.126.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 15:41:18.375002 2026] [security2:error] [pid 29263:tid 29263] [client 34.80.126.238:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globetechsecurities.com"] [uri "/.env.secret"] [unique_id "at5bXowKj3Mk00Jc7qi5OQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-25 18:29:17
(4 days ago)
Web attack/malicious scanning detected
Web App Attack