🇺🇸
chronos
2026-06-22 06:59:12
(12 minutes ago)
[AUTORAVALT][[22/06/2026 - 03:59:12 -03:00 UTC]
Attack from [185.177.72.66] Action: BLocKed
DDoS At ...
show more
[AUTORAVALT][[22/06/2026 - 03:59:12 -03:00 UTC]
Attack from [185.177.72.66] Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web App Attack -> Attempts to probe for or exploit instal]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
🇩🇪
loebas
2026-06-22 06:56:37
(15 minutes ago)
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /app/sendgrid_api_key.env HTTP/1.1" 403 8235 "-" ...
show more
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /app/sendgrid_api_key.env HTTP/1.1" 403 8235 "-" "curl/8.7.1"
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /%2ejenkins/hudson%2etasks%2eWasmTableAggregate%2exml HTTP/1.1" 403 3257 "-" "curl/8.7.1"
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /administrator/manifests/ HTTP/1.1" 403 3257 "-" "curl/8.7.1"
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /banking/oauth_redirects%2eenv HTTP/1.1" 403 3257 "-" "curl/8.7.1"
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /core/data/debug%2elog HTTP/1.1" 403 3257 "-" "curl/8.7.1"
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /%2ejenkins/hudson%2etasks%2eStklos%2exml HTTP/1.1" 403 3257 "-" "curl/8.7.1"
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /config/upload/config%2eyml HTTP/1.1" 403 3257 "-" "curl/8.7.1"
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200] "GET /grafana/api/plugins HTTP/1.1" 403 3257 "-" "curl/8.7.1"
185.177.72.66 - - [22/Jun/2026:08:56:36 +0200
...
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
ut-addicted.com
2026-06-22 06:51:23
(20 minutes ago)
\[Mon Jun 22 08:51:21.955959 2026\] \[:error\] \[pid 19462:tid 139785664374528\] \[client 185.177.72 ...
show more
\[Mon Jun 22 08:51:21.955959 2026\] \[:error\] \[pid 19462:tid 139785664374528\] \[client 185.177.72.66:59556\] \[client 185.177.72.66\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/opt/mailcow-dockerized/mailcow.conf"\] \[unique_id "ajjbaTP16yOFqlzhSId-OwAAANc"\]
show less
Brute-Force
Web App Attack
🇩🇪
Bedios GmbH
2026-06-22 06:24:15
(47 minutes ago)
Login credentials theft attempt
Hacking
🇺🇸
chronos
2026-06-22 06:17:26
(54 minutes ago)
[AUTORAVALT][[22/06/2026 - 03:17:26 -03:00 UTC]
Attack from [185.177.72.66] Action: BLocKed
Bad Web ...
show more
[AUTORAVALT][[22/06/2026 - 03:17:26 -03:00 UTC]
Attack from [185.177.72.66] Action: BLocKed
Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing.
]
...
show less
Bad Web Bot
🇳🇱
Savvii
2026-06-22 06:12:36
(59 minutes ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-06-22 06:02:46
(1 hour ago)
185.177.72.66 Web Application Firewall multiple violations
Hacking
Web App Attack
🇳🇿
Antinson
2026-06-22 05:55:42
(1 hour ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇮🇹
ciccio diddo
2026-06-22 05:37:07
(1 hour ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-06-22 05:15:40
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
daveoctober
2026-06-22 04:18:33
(2 hours ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
🇬🇧
Yosi
2026-06-22 04:11:44
(3 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇳🇱
Savvii
2026-06-22 03:50:09
(3 hours ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-06-22 01:11:53
(5 hours ago)
2026/06/22 02:11:49 [error] 1094874#1094874: *65752 access forbidden by rule, client: 185.177.72.66, ...
show more
2026/06/22 02:11:49 [error] 1094874#1094874: *65752 access forbidden by rule, client: 185.177.72.66, server: operadotejo.org, request: "GET /wp-content/uploads/2024/.env HTTP/2.0", host: "operadotejo.org"
2026/06/22 02:11:49 [error] 1094874#1094874: *65753 access forbidden by rule, client: 185.177.72.66, server: operadotejo.org, request: "GET /wp-content/uploads/2025/.env HTTP/2.0", host: "operadotejo.org"
2026/06/22 02:11:52 [error] 1094874#1094874: *65805 access forbidden by rule, client: 185.177.72.66, server: operadotejo.org, request: "GET /sites/default/.env HTTP/2.0", host: "operadotejo.org"
show less
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-06-22 01:06:42
(6 hours ago)
19 attempts against mh-modsecurity-ban on cedar
Brute-Force
Web App Attack