🇫🇷
Catalin Negru
2026-11-12 17:12:29
UTC ·
(17 hours ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇺🇸
mnsf
2026-11-12 17:05:13
UTC ·
(17 hours ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇧🇷
radardatelecom
2026-11-12 16:55:03
UTC ·
(17 hours ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇨🇦
AEITS
2026-11-12 16:09:21
UTC ·
(18 hours ago)
Fail2Ban www
Bad Web Bot
Web App Attack
🇺🇸
Victor López
2026-11-12 15:58:38
UTC ·
(18 hours ago)
2026/11/12 10:58:38 [error] 271570#271570: *1696274 limiting requests, excess: 50.600 by zone "general", client: 209.99.184.191, server: advisainternational.com, request: "GET /application/config/encryption.php HTTP/2.0", host: "advisainternational.c ...
show more
2026/11/12 10:58:38 [error] 271570#271570: *1696274 limiting requests, excess: 50.600 by zone "general", client: 209.99.184.191, server: advisainternational.com, request: "GET /application/config/encryption.php HTTP/2.0", host: "advisainternational.com"
2026/11/12 10:58:38 [error] 271570#271570: *1696273 limiting requests, excess: 51.400 by zone "general", client: 209.99.184.191, server: advisainternational.com, request: "GET /application/config/config.php HTTP/2.0", host: "advisainternational.com"
2026/11/12 10:58:38 [error] 271570#271570: *1696277 limiting requests, excess: 52.400 by zone "general", client: 209.99.184.191, server: advisainternational.com, request: "GET /application/config/doctypes.php HTTP/2.0", host: "advisainternational.com"
2026/11/12 10:58:38 [error] 271572#271572: *1696224 limiting requests, excess: 52.400 by zone "general", client: 209.99.184.191, server: advisainternational.com, request: "GET /core/.env HTTP/2.0", host: "advisainternational.com"
2026/11/12 10:
...
show less
DDoS Attack
Web App Attack
🇧🇪
cmbplf
2026-11-12 15:26:13
UTC ·
(18 hours ago)
492 requests with url.path *config.php
436 requests with url.path *config.json
226 requests with url.path *phpinfo.php
103 requests with url.path *.aws/*
Brute-Force
Bad Web Bot
Anonymous
2026-11-12 14:06:37
UTC ·
(20 hours ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
🇩🇪
maxpower
2026-11-12 13:43:42
UTC ·
(20 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 209.99.184.191 (CH/Switzerland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 209.99.184.191 - - [12/Nov/2026:14:43:38 +0100] "GET /config/secrets. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 209.99.184.191 (CH/Switzerland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 209.99.184.191 - - [12/Nov/2026:14:43:38 +0100] "GET /config/secrets.json HTTP/2.0" 404 0 "-" "Go-http-client/2.0" "209.99.184.191" host=abruzzotour.it
show less
Port Scan
Anonymous
2026-11-12 13:22:51
UTC ·
(20 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇧🇷
Halux
2026-11-12 12:27:04
UTC ·
(21 hours ago)
209.99.184.191 Web Application Firewall multiple violations
Hacking
Web App Attack
🇫🇮
6kilowatti
2026-11-12 12:14:59
UTC ·
(22 hours ago)
209.99.184.191 - - [12/Nov/2026:14:14:58 +0200] "GET /.git/config HTTP/1.1" 404 60 "-" "Go-http-client/1.1"
...
Web App Attack
Anonymous
2026-11-12 11:49:07
UTC ·
(22 hours ago)
Bot / scanning and/or hacking attempts: GET /wp-includes/js/comment-reply.min.js?ver=7.0.8 HTTP/2.0, GET / HTTP/2.0, GET /wp-includes/js/dist/dom-ready.min.js?ver=a06281ae5cf5500e9, GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d , GET ...
show more
Bot / scanning and/or hacking attempts: GET /wp-includes/js/comment-reply.min.js?ver=7.0.8 HTTP/2.0, GET / HTTP/2.0, GET /wp-includes/js/dist/dom-ready.min.js?ver=a06281ae5cf5500e9, GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d , GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec H, GET /index.php/phpinfo HTTP/2.0, GET /.git/config HTTP/2.0, GET /phpinfo/ HTTP/2.0, GET /wp-includes/js/dist/a11y.min.js?ver=af934e5259bc51b8718e H
show less
Hacking
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-12 11:40:09
UTC ·
(22 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇵🇱
gandaflux
2026-11-12 11:18:40
UTC ·
(23 hours ago)
209.99.184.191 [redacted-domain] - [12/Nov/2026:12:16:32 +0100] "GET /.git/config HTTP/2.0" 403 158 "-" "Go-http-client/2.0"
209.99.184.191 [redacted-domain] - [12/Nov/2026:12:18:37 +0100] "GET /pma/index.php HTTP/2.0" 404 158 "-" "Go-http-client/2.0 ...
show more
209.99.184.191 [redacted-domain] - [12/Nov/2026:12:16:32 +0100] "GET /.git/config HTTP/2.0" 403 158 "-" "Go-http-client/2.0"
209.99.184.191 [redacted-domain] - [12/Nov/2026:12:18:37 +0100] "GET /pma/index.php HTTP/2.0" 404 158 "-" "Go-http-client/2.0"
209.99.184.191 [redacted-domain] - [12/Nov/2026:12:18:37 +0100] "GET /phpMyAdmin/index.php HTTP/2.0" 404 158 "-" "Go-http-client/2.0"
show less
Web App Attack
🇩🇪
LRob
2026-11-12 10:37:01
UTC ·
(23 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Go-http-client/2.0 | 2026-11-12 10:37 UTC
Hacking
Web App Attack