🇨🇭
🇨🇭 Hosting
2026-10-03 05:10:17
(19 hours ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-10-02 05:13:27
(1 day ago)
234 attacks on password/key grabbing URLs, shell probes, directory traversals, VC URLs, env grabbing ...
show more
234 attacks on password/key grabbing URLs, shell probes, directory traversals, VC URLs, env grabbing URLs, config grabbing URLs (type 2), PHP URLs, env grabbing URLs (type 2):
GET /id_ecdsa HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /.env.js HTTP/1.1
GET /app-config.json HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
show less
Hacking
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-10-02 05:10:12
(1 day ago)
Automated WAF report: 400-500 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇩🇪
reznekcs
2026-10-02 05:00:40
(1 day ago)
Blocked by UFW firewall
Brute-Force
🇵🇱
strefapi_com
2026-10-02 04:53:57
(1 day ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇸🇬
Cloudkul Cloudkul
2026-10-02 01:07:54
(1 day ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
🇩🇪
Hazzard
2026-10-02 00:39:36
(2 days ago)
(PERMBLOCK) 136.66.28.130 (US/United States/Oregon/The Dalles/130.28.66.136.bc.googleusercontent.com ...
show more
(PERMBLOCK) 136.66.28.130 (US/United States/Oregon/The Dalles/130.28.66.136.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
🇳🇱
ConsulHosting
2026-10-02 00:31:38
(2 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇧🇪
cmbplf
2026-10-01 22:54:23
(2 days ago)
114 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
🇧🇷
radardatelecom
2026-10-01 22:26:03
(2 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-01 21:59:43
(2 days ago)
Auto-ban: >3000 req/min op 2026-10-01
Web App Attack
SSH
Hacking
🇷🇴
iulianh
2026-10-01 21:23:36
(2 days ago)
80,443
Brute-Force
SSH
🇺🇸
TAY
2026-10-01 16:26:47
(2 days ago)
136.66.28.130 - - [02/Oct/2026:00:26:47 +0800] "GET /uploads../.env HTTP/1.1" 404 2050 "-" "Mozilla/ ...
show more
136.66.28.130 - - [02/Oct/2026:00:26:47 +0800] "GET /uploads../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.66.28.130 - - [02/Oct/2026:00:26:47 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 404 2050 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.66.28.130 - - [02/Oct/2026:00:26:47 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 404 2050 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.66.28.130 - - [02/Oct/2026:00:26:47 +0800] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 2057 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.66.28.130 - - [02/Oct/2026:00:26:47 +0800] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.66.28.130 - - [02/Oct/2026:00:26:47 +0800] "G
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-10-01 15:44:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.66.28.130 (130.28.66.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.28.130 (130.28.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:44:13.619469 2026] [security2:error] [pid 13320:tid 13320] [client 136.66.28.130:47784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beta.instagenii.com"] [uri "/static../.env"] [unique_id "ar5_zdIjjbqOXp43OW_q8AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 15:13:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.66.28.130 (130.28.66.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.28.130 (130.28.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:13:47.872914 2026] [security2:error] [pid 5126:tid 5126] [client 136.66.28.130:35054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gisur.com"] [uri "/files../.env"] [unique_id "ar54q-Bxf7XJ1t2xT4pIvwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
