🇺🇸
zcampbell
2026-09-18 01:05:58
(1 hour ago)
Web vulnerability scanning: probing for exposed sensitive files (.aws). Detected and blocked automat ...
show more
Web vulnerability scanning: probing for exposed sensitive files (.aws). Detected and blocked automatically.
show less
Web App Attack
Bad Web Bot
🇫🇷
SpaceHost-Server
2026-09-17 22:14:34
(4 hours ago)
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-09-17 19:01:07
(7 hours ago)
excessive HTTP 404 errors
Bad Web Bot
2026-09-17 18:52:43
(7 hours ago)
"GET /.aws/credentials HTTP/1.1"
Hacking
Web App Attack
🇩🇪
Hazzard
2026-09-17 16:41:21
(9 hours ago)
(PERMBLOCK) 104.199.163.223 (TW/Taiwan/Taipei City/Taipei/223.163.199.104.bc.googleusercontent.com/[ ...
show more
(PERMBLOCK) 104.199.163.223 (TW/Taiwan/Taipei City/Taipei/223.163.199.104.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
🇩🇪
macrob
2026-09-17 15:54:52
(10 hours ago)
2026/09/17 15:54:51 [error] 3435309#3435309: *8608591 access forbidden by rule, client: 104.199.163. ...
show more
2026/09/17 15:54:51 [error] 3435309#3435309: *8608591 access forbidden by rule, client: 104.199.163.223, server: binixo.pl, request: "GET /app/.env HTTP/2.0", host: "binixo.pl", referrer: "https://apps.binixo.pl/app/.env"
2026/09/17 15:54:51 [error] 3435310#3435310: *8630896 access forbidden by rule, client: 104.199.163.223, server: binixo.pl, request: "GET /.env.production HTTP/2.0", host: "binixo.pl", referrer: "https://apps.binixo.pl/.env.production"
2026/09/17 15:54:51 [error] 3435310#3435310: *8630896 access forbidden by rule, client: 104.199.163.223, server: binixo.pl, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "binixo.pl", referrer: "https://apps.binixo.pl/dist/.vite/manifest.json"
...
show less
Web App Attack
2026-09-17 14:35:35
(12 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
MakoWish
2026-09-17 14:14:24
(12 hours ago)
Fuzzing for misconfigured web servers.
Hacking
Web App Attack
🇪🇸
robotstxt
2026-09-17 14:12:53
(12 hours ago)
104.199.163.223 - - [17/Sep/2026:14:11:51 +0000] "GET / HTTP/2.0" 403 27630 "https://api.ccoo.app" " ...
show more
104.199.163.223 - - [17/Sep/2026:14:11:51 +0000] "GET / HTTP/2.0" 403 27630 "https://api.ccoo.app" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "104.199.163.223" edge="172.71.218.156"
104.199.163.223 - - [17/Sep/2026:14:11:53 +0000] "GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.14.2 HTTP/2.0" 403 21317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "104.199.163.223" edge="162.159.98.213"
104.199.163.223 - - [17/Sep/2026:14:11:53 +0000] "GET /wp-content/plugins/gdpr-cookie-compliance/dist/scripts/main.js?ver=5.1.0 HTTP/2.0" 403 21315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "104.199.163.223" edge="162.158.114.139"
104.199.163.223 - - [17/Sep/2026:14:11:53 +0000] "GET /wp-content/plugins/search-filter-pro/assets-v1/frontend/components/range.js?ver=1fe8b7d52c10a7df36a
...
show less
Web App Attack
🇧🇪
Ivo Vynckier
2026-09-17 14:05:00
(12 hours ago)
104.199.163.223 - - [17/Sep/2026:08:16:48 +0200] "GET /wp-json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 A ...
show more
104.199.163.223 - - [17/Sep/2026:08:16:48 +0200] "GET /wp-json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
104.199.163.223 - - [17/Sep/2026:08:16:48 +0200] "GET /assets/manifest.json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
104.199.163.223 - - [17/Sep/2026:08:16:48 +0200] "GET /config.json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
104.199.163.223 - - [17/Sep/2026:08:16:48 +0200] "GET /manifest.json HTTP/2.0" 404 2310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
show less
Web App Attack
🇩🇪
raph
2026-09-17 13:40:16
(12 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-17 09:36:23
(17 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇸🇬
Cloudkul Cloudkul
2026-09-17 09:00:30
(17 hours ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
🇩🇰
HostingGroup
2026-09-17 08:51:54
(17 hours ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 6. First blocked: 2026-09-17.
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 08:17:56
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.163.223 (223.163.199.104.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.163.223 (223.163.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:17:49.129189 2026] [security2:error] [pid 11354:tid 11354] [client 104.199.163.223:36572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisconsinstatehuntingexpo.com"] [uri "/.svn/entries"] [unique_id "aquiLZaSvDoi2pTzBUwPDgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack