🇩🇪
ghostwarriors
2026-09-30 03:20:06
(3 weeks ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇭🇳
soporte
2026-09-30 03:10:17
(3 weeks ago)
Probe for vulnerabilities. Path attempted: /login
Web App Attack
🇩🇪
yitzhaq
2026-09-30 03:01:39
(3 weeks ago)
8.234.168.178 - - [30/Sep/2026:05:01:37 +0200] "GET /keys/service-account.json HTTP/2.0" 403 292 "-" ...
show more
8.234.168.178 - - [30/Sep/2026:05:01:37 +0200] "GET /keys/service-account.json HTTP/2.0" 403 292 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
8.234.168.178 - - [30/Sep/2026:05:01:37 +0200] "GET /_profiler/open HTTP/2.0" 404 288 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
8.234.168.178 - - [30/Sep/2026:05:01:37 +0200] "GET /api/4/config HTTP/2.0" 403 292 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
8.234.168.178 - - [30/Sep/2026:05:01:37 +0200] "GET /api/v1/config HTTP/2.0" 403 292 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
8.234.168.178 - - [30/Sep/2026:05:01:37 +0200] "GET /api/settings HTTP/2.0" 403 292 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
8.234.168.178 - - [30/Sep/2026:05:01:37 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 404 288 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
8.234.168.178 - - [30/Sep/2026:05:01:37 +0200] "GET
show less
Web App Attack
Hacking
🇺🇸
Charlesiv
2026-09-30 02:16:18
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Endpoint: /cgi-bin/php
Query: ?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
Timestamp: 2026-09-30T01:26:28Z
Ray ID: a42f7089d83a9de2
UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
show less
Bad Web Bot
🇩🇪
Hazzard
2026-09-30 01:50:46
(3 weeks ago)
(PERMBLOCK) 8.234.168.178 (US/United States/District of Columbia/Washington/178.168.234.8.bc.googleu ...
show more
(PERMBLOCK) 8.234.168.178 (US/United States/District of Columbia/Washington/178.168.234.8.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-30 01:13:05
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 8.234.168.178 (178.168.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 8.234.168.178 (178.168.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:12:58.526267 2026] [security2:error] [pid 12983:tid 12983] [client 8.234.168.178:40956] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||kbabykiss.srtmanagementservices.com|F|2"] [data ".srtmanagementservices.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kbabykiss.srtmanagementservices.com"] [uri "/z9x8c7v6b5-debug-trigger-kbabykiss.srtmanagementservices.com"] [unique_id "arxiGmoqxeawe4SJmVOVgAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-30 00:10:01
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12467
Exploited Host
Web App Attack
🇧🇪
cmbplf
2026-09-29 23:10:19
(3 weeks ago)
4.880 requests from abuseipdb.com blacklisted IP (10mos1w6d)
Brute-Force
Bad Web Bot
🇧🇷
radardatelecom
2026-09-29 22:26:02
(3 weeks ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇬🇧
kie
2026-09-29 22:16:30
(3 weeks ago)
29-09-2026:22:16:27UTC [Nginx Web Server] Suspicious web request: path:/.well-known/ path:/.env path ...
show more
29-09-2026:22:16:27UTC [Nginx Web Server] Suspicious web request: path:/.well-known/ path:/.env path:/api/v1/config path:/actuator/ path:/.git path:/.aws/ (136 request(s)).
show less
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-29 22:00:52
(3 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-29 21:59:42
(3 weeks ago)
Auto-ban: >3000 req/min op 2026-09-29
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-29 21:56:10
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 8.234.168.178 (178.168.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.168.178 (178.168.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 17:56:03.036236 2026] [security2:error] [pid 26639:tid 26639] [client 8.234.168.178:50594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kadinisi.org.mavikalem.org"] [uri "/.env.prod"] [unique_id "arwz81WGfJQG86U5suI3pQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-09-29 21:29:09
(3 weeks ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-29 21:18:58
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 8.234.168.178 (178.168.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 8.234.168.178 (178.168.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 17:18:51.605105 2026] [security2:error] [pid 22667:tid 22667] [client 8.234.168.178:56048] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||athome360.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "athome360.com"] [uri "/z9x8c7v6b5-debug-trigger-athome360.com"] [unique_id "arwrO-ji6F0CzDkPnq8X8wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack