2026-09-17 03:52:45
(2 minutes ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇫🇮
oh.mg
2026-09-17 03:26:03
(28 minutes ago)
[Thu Sep 17 05:26:01.900696 2026] [security2:error] [pid 2545459:tid 2545486] [client 136.69.183.12: ...
show more
[Thu Sep 17 05:26:01.900696 2026] [security2:error] [pid 2545459:tid 2545486] [client 136.69.183.12:0] [client 136.69.183.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.cat"] [uri "/api/v1/validate/code"] [unique_id "aqtdyf_qgH0gjzITKY-SLAAAAJg"]
[Thu Sep 17 05:26:03.263914 2026] [security2:error] [pid 2545459:tid 2545475] [client 136.69.183.12:0] [client 136.69.183.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [ta
...
show less
Web App Attack
Bad Web Bot
🇳🇱
Savvii
2026-09-17 02:43:10
(1 hour ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-09-17 02:32:31
(1 hour ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.69.183.12 (US/Un ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.69.183.12 (US/United States/12.183.69.136.bc.googleusercontent.com)
show less
Bad Web Bot
🇧🇾
lns.bz
2026-09-17 01:10:15
(2 hours ago)
Too many 404 requests [BY]
Web App Attack
2026-09-17 01:10:04
(2 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇫🇮
paissangroup
2026-09-17 00:46:03
(3 hours ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Savvii
2026-09-17 00:34:06
(3 hours ago)
30 attempts against mh-misbehave-ban on plum
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-09-17 00:29:43
(3 hours ago)
[redacted] 136.69.183.12 - - [17/Sep/2026:01:29:42 +0100] "GET /conf/.env HTTP/1.1" 302 6741 0/43026 ...
show more
[redacted] 136.69.183.12 - - [17/Sep/2026:01:29:42 +0100] "GET /conf/.env HTTP/1.1" 302 6741 0/43026 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://[redacted]/)" [redacted] 136.69.183.12 - - [17/Sep/2026:01:29:42 +0100] "GET /temp/.env HTTP/1.1" 302 6741 0/34563 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://[redacted]/perplexitybot)" [redacted] 136.69.183.12 - - [17/Sep/2026:01:29:42 +0100] "GET /env/.env HTTP/1.1" 302 6741 0/36362 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://[redacted]/perplexitybot)" [redacted] 136.69.183.12 - - [17/Sep/2026:01:29:42 +0100] "GET /tmp/.env HTTP/1.1" 302 6741 0/41476 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://[redacted]/[redacted])"
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-16 23:55:47
(3 hours ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bazter.pro
2026-09-16 23:55:42
(3 hours ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-09-16 23:25:51
(4 hours ago)
136.69.183.12 - - [16/Sep/2026:23:25:00 +0000] "GET /z9x8c7v6b5-debug-trigger-fireflycomms.com HTTP/ ...
show more
136.69.183.12 - - [16/Sep/2026:23:25:00 +0000] "GET /z9x8c7v6b5-debug-trigger-fireflycomms.com HTTP/2.0" 403 20 "https://fireflycomms.com/z9x8c7v6b5-debug-trigger-fireflycomms.com" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-" edge="136.69.183.12"
136.69.183.12 - - [16/Sep/2026:23:25:01 +0000] "GET /service-account.json HTTP/2.0" 403 20 "https://fireflycomms.com/service-account.json" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-" edge="136.69.183.12"
136.69.183.12 - - [16/Sep/2026:23:25:01 +0000] "GET /secrets.yml HTTP/2.0" 403 20 "https://fireflycomms.com/secrets.yml" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-" edge="136.69.183.12"
136.69.183.12 - - [16/Sep/2026:23:25:01 +0000] "GET /credentials.json HTTP/2.0" 403 20 "https://fireflycomms.com/credentials.json" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "-" edge="136.69.183.12"
136.69.183.12 - - [16/Sep/2026:23:25:01 +
...
show less
Web App Attack
🇵🇱
tomkolp
2026-09-16 23:05:45
(4 hours ago)
CrowdSec - Scenario: crowdsecurity/http-sensitive-files. Duration: 4h.
Port Scan
Web App Attack
🇪🇸
robotstxt
2026-09-16 22:49:01
(5 hours ago)
136.69.183.12 - - [16/Sep/2026:22:48:20 +0000] "GET /.aws/credentials HTTP/2.0" 403 49672 "-" "Mozil ...
show more
136.69.183.12 - - [16/Sep/2026:22:48:20 +0000] "GET /.aws/credentials HTTP/2.0" 403 49672 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-"
136.69.183.12 - - [16/Sep/2026:22:48:20 +0000] "GET /.git/HEAD HTTP/2.0" 403 49672 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "-"
136.69.183.12 - - [16/Sep/2026:22:48:20 +0000] "GET /.aws/config HTTP/2.0" 403 49663 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-"
136.69.183.12 - - [16/Sep/2026:22:48:20 +0000] "GET /.git-credentials HTTP/2.0" 403 49672 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" "-"
136.69.183.12 - - [16/Sep/2026:22:48:21 +0000] "GET /.gitlab-ci.yml HTTP/2.0" 403 49601 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "-"
...
show less
Web App Attack
🇳🇱
e.fierstra
2026-09-16 22:28:54
(5 hours ago)
excessive HTTP 404 errors
Bad Web Bot