🇫🇷
alpha
2026-08-01 02:44:05
(14 hours ago)
Automated honeypot: scanner probed decoy URL on cdn.aldorand.fr (honeypot decoy)
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-31 21:59:40
(19 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-30.
show less
Web App Attack
SSH
Hacking
🇿🇦
conure
2026-07-31 12:12:23
(1 day ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-30 21:59:07
(1 day ago)
Auto-ban: >3000 req/min op 2026-07-30
Web App Attack
SSH
Hacking
🇭🇺
whitehoodie
2026-07-30 20:48:02
(1 day ago)
AUTOMATED REPORT: Tried to access .env file
Hacking
Bad Web Bot
Web App Attack
2026-07-30 19:21:38
(1 day ago)
Web App Attack
🇳🇱
ParaBug
2026-07-30 19:03:16
(1 day ago)
213.163.206.91 - - [30/Jul/2026:21:03:16 +0200] "GET /.env HTTP/1.1" 404 4623 "https://antik-wagon.c ...
show more
213.163.206.91 - - [30/Jul/2026:21:03:16 +0200] "GET /.env HTTP/1.1" 404 4623 "https://antik-wagon.com/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Phishing
Brute-Force
Web App Attack
🇺🇸
Matthew Ping
2026-07-30 19:00:02
(1 day ago)
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on wp3.
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-07-30 18:28:41
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 213.163.206.91 (213-163-206-91.sg-sin1.upcloud. ...
show more
(mod_security) mod_security (id:210730) triggered by 213.163.206.91 (213-163-206-91.sg-sin1.upcloud.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 14:28:33.362422 2026] [security2:error] [pid 2639067:tid 2639067] [client 213.163.206.91:33370] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||192.64.150.202|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.202"] [uri "/settings.json.bak"] [unique_id "amuX0VVM5k6xWb4WihTPtQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
thesimonmanuel
2026-07-30 18:09:21
(1 day ago)
2026/07/30 23:39:16 [error] 873941#873941: *64998 directory index of "/home/[redacted]/htdocs/[redac ...
show more
2026/07/30 23:39:16 [error] 873941#873941: *64998 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 213.163.206.91, server: [redacted].com, request: "GET / HTTP/1.1", host: "[redacted].com", referrer: "https://[redacted].com/database.json?v=25tTp"
2026/07/30 23:39:16 [error] 873941#873941: *64999 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 213.163.206.91, server: [redacted].com, request: "GET / HTTP/1.1", host: "[redacted].com", referrer: "https://[redacted].com/credentials.xml?v=eV8HT"
2026/07/30 23:39:21 [error] 873941#873941: *64999 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 213.163.206.91, server: [redacted].com, request: "GET / HTTP/1.1", host: "[redacted].com", referrer: "https://[redacted].com/database%2ejson?v=25tTp"
show less
Port Scan
Web App Attack
🇮🇪
AutosOnShow
2026-07-30 18:08:05
(1 day ago)
blocked for webapp attack | path requested: /%64%65%76/.%65%6e%76 | seen at 2026-07-30 18:07:30.490 ...
show more
blocked for webapp attack | path requested: /%64%65%76/.%65%6e%76 | seen at 2026-07-30 18:07:30.490 |
show less
Web App Attack
🇩🇪
onlyops.app
2026-07-30 18:00:07
(1 day ago)
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-mods ...
show more
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-modsecurity jail) | onlyops.app
show less
Exploited Host
🇺🇸
kosada.com
2026-07-30 17:53:25
(1 day ago)
Web vulnerability probing: /phpinfo
Web App Attack
🇺🇸
HamSammich
2026-07-30 17:48:56
(1 day ago)
Automated sensor: 11 HTTP connection/probe attempts over the last 24h (latest 2026-07-30T17:48Z).
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 17:47:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 213.163.206.91 (213-163-206-91.sg-sin1.upcloud. ...
show more
(mod_security) mod_security (id:210492) triggered by 213.163.206.91 (213-163-206-91.sg-sin1.upcloud.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 13:47:23.176951 2026] [security2:error] [pid 5247:tid 5247] [client 213.163.206.91:57598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exhibitmanager.krmartindale.com"] [uri "/static/.env"] [unique_id "amuOKwZW6hcBzOUoHlfiyAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack