🇺🇸
oralunal
2026-09-11 05:33:37
(15 hours ago)
IP banned by Fail2Ban in jail its-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
H24
2026-09-11 04:41:45
(16 hours ago)
/.git/HEAD /@fs/var/task/.env /images../.env /@fs/root/.aws/credentials /.env //.env /_nuxt/../.env ...
show more
/.git/HEAD /@fs/var/task/.env /images../.env /@fs/root/.aws/credentials /.env //.env /_nuxt/../.env /@fs/app/.env /@fs/src/.env /@fs/..%2f..%2f..%2f..%2f..%2froot/.env
show less
Web App Attack
🇩🇪
arnisolutions
2026-09-11 04:09:59
(16 hours ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ...
show more
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-09-11 and 2026-09-11 (UTC). Sample request: GET /admin/_payload.json HTTP/2.0
show less
Web App Attack
Hacking
🇳🇱
e.fierstra
2026-09-11 04:04:38
(16 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-11 03:53:25
(16 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 03:46:52
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.27.17 (17.27.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.27.17 (17.27.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:46:47.383136 2026] [security2:error] [pid 12251:tid 12251] [client 136.108.27.17:43270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grabagame.com"] [uri "/static//home/user/.env"] [unique_id "aqN5p1_R3NLDKeUCfAxGCAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-11 03:21:53
(17 hours ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bazter.pro
2026-09-11 03:21:30
(17 hours ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-09-11 03:04:41
(17 hours ago)
136.108.27.17 - - [11/Sep/2026:03:03:39 +0000] "GET /.aws/config HTTP/2.0" 403 48797 "-" "Mozilla/5. ...
show more
136.108.27.17 - - [11/Sep/2026:03:03:39 +0000] "GET /.aws/config HTTP/2.0" 403 48797 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-" edge="136.108.27.17"
136.108.27.17 - - [11/Sep/2026:03:03:40 +0000] "GET /.aws/credentials HTTP/2.0" 403 48797 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-" edge="136.108.27.17"
136.108.27.17 - - [11/Sep/2026:03:03:40 +0000] "GET /.git/config HTTP/2.0" 403 48797 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-" edge="136.108.27.17"
136.108.27.17 - - [11/Sep/2026:03:03:40 +0000] "GET /z9x8c7v6b5-debug-trigger-fundaciopacopuerto.cat HTTP/2.0" 403 48798 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)" "-" edge="136.108.27.17"
136.108.27.17 - - [11/Sep/2026:03:03:40 +0000] "GET /.git/HEAD HTTP/2.0" 403 48797 "-" "Mozilla/5.0 (compatible; YouBot/1.0
...
show less
Web App Attack
🇧🇪
cmbplf
2026-09-11 02:35:20
(18 hours ago)
371 requests with url.path */proc/*
117 requests with url.path *.php.bak
Brute-Force
Bad Web Bot
🇩🇪
MusicLibrary
2026-09-11 02:34:08
(18 hours ago)
Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-09-11 02:28:17
(18 hours ago)
.env scanning [BY]
Web App Attack
🇩🇪
macrob
2026-09-11 02:25:09
(18 hours ago)
2026/09/11 02:25:07 [error] 100827#100827: *958240 access forbidden by rule, client: 136.108.27.17, ...
show more
2026/09/11 02:25:07 [error] 100827#100827: *958240 access forbidden by rule, client: 136.108.27.17, server: fastcredit.net.ua, request: "GET /.vite/manifest.json HTTP/2.0", host: "fastcredit.net.ua"
2026/09/11 02:25:07 [error] 100827#100827: *958240 access forbidden by rule, client: 136.108.27.17, server: fastcredit.net.ua, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "fastcredit.net.ua"
2026/09/11 02:25:08 [error] 100827#100827: *958252 access forbidden by rule, client: 136.108.27.17, server: fastcredit.net.ua, request: "GET /.env?import&raw HTTP/2.0", host: "fastcredit.net.ua"
...
show less
Web App Attack
🇬🇧
oja
2026-09-11 02:01:58
(18 hours ago)
Aggressive web scanner
Web App Attack
🇫🇷
✨
2026-09-11 01:32:16
(19 hours ago)
Domain : eatdrinksleep.ltd.uk
Rule : config
2026-09-11 01:29:09 217.194.212.6 GET /.aws/credentials ...
show more
Domain : eatdrinksleep.ltd.uk
Rule : config
2026-09-11 01:29:09 217.194.212.6 GET /.aws/credentials - 443 - 136.108.27.17 HTTP/2.0 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] ) - eatdrinksleep.ltd.uk 404 0 2 1556 490 79 - -
show less
Hacking
SQL Injection