🇩🇪
XICTRON
2026-06-17 19:40:08
(50 minutes ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇳🇱
debestelapp
2026-06-17 19:15:09
(1 hour ago)
Web App Attack
🇸🇬
Starburst SysOp Team
2026-06-17 17:47:25
(2 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-sin2-2)
show less
Hacking
🇦🇺
rubixstudios
2026-06-17 10:20:03
(10 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇧🇷
dominioz
2026-06-17 08:09:17
(12 hours ago)
2026-06-17 08:07:55 GET /wp-content/debug.log - - 207.241.173.99 HTTP/1.1 Mozilla/5.0+(Macintosh;+In ...
show more
2026-06-17 08:07:55 GET /wp-content/debug.log - - 207.241.173.99 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36+Edg/147.0.0.0 - 404 1440
2026-06-17 08:07:58 GET /credentials.json - - 207.241.173.99 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - 404 1440
2026-06-17 08:07:58 GET /service-account-key.json - - 207.241.173.99 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64;+rv:149.0)+Gecko/20100101+Firefox/149.0 - 404 1440
2026-06-17 08:07:58 GET /.env.bak - - 207.241.173.99 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.3+Safari/605.1.15 - 404 1440
...
show less
Web App Attack
🇩🇪
todix
2026-06-17 07:41:46
(12 hours ago)
Web App Attack Exploid from 207.241.173.99
Web App Attack
2026-06-17 06:09:38
(14 hours ago)
Aggressive web scan
Web App Attack
🇫🇷
masterguru
2026-06-17 03:46:32
(16 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-197)
show less
Hacking
2026-06-16 23:24:38
(21 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 207.241.173.99 (US/United States/-)
SQL Injection
🇳🇱
Site.eu
2026-06-16 17:53:41
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇦🇺
nzhost.co.nz
2026-06-16 16:45:29
(1 day ago)
$f2bV_matches
Hacking
Brute-Force
🇺🇸
rdpguard.com
2026-06-16 16:28:54
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
Selckie
2026-06-16 14:52:18
(1 day ago)
fail2ban: NGINX unusual impact
Web App Attack
🇫🇷
masterguru
2026-06-16 13:04:58
(1 day ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 207.241.173.99 (US/United States/-): ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 207.241.173.99 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-16 11:35:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 207.241.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 207.241.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:35:00.141750 2026] [security2:error] [pid 6981:tid 6981] [client 207.241.173.99:38536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wwts.io"] [uri "/.env.production.copy"] [unique_id "ajE05BV9RxfF6NY0fy-K8gAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack