🇪🇸
alferez
2026-08-28 22:42:59
(33 minutes ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
🇬🇧
blik2108
2026-08-28 22:34:14
(42 minutes ago)
3.80.53.211 - - [28/Aug/2026:22:34:09 +0000] "GET /build/manifest.json HTTP/1.1" 404 3431 "-" "Mozil ...
show more
3.80.53.211 - - [28/Aug/2026:22:34:09 +0000] "GET /build/manifest.json HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" "-"
3.80.53.211 - - [28/Aug/2026:22:34:10 +0000] "GET /credentials.json HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" "192.168.158.166"
3.80.53.211 - - [28/Aug/2026:22:34:11 +0000] "GET /rclone.conf HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" "10.11.217.1"
3.80.53.211 - - [28/Aug/2026:22:34:11 +0000] "GET /z9x8c7v6b5-debug-trigger-old.bigmotive.com HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" "10.53.242.73"
3.80.53.211 - - [28/Aug/2026:22:34:12 +0000] "GET /dist/manifest.json HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" "-"
3.80.53.211 - - [28/Aug/2026:22:34:12 +0000] "G
...
show less
Web App Attack
🇩🇪
Viveronese
2026-08-28 21:28:25
(1 hour ago)
HTTP vulnerability scanning
Web App Attack
2026-08-28 18:32:53
(4 hours ago)
Automated report from Fail2Ban firewall ban
Brute-Force
SSH
IoT Targeted
🇩🇪
macrob
2026-08-28 16:44:17
(6 hours ago)
2026/08/28 16:43:59 [error] 3672837#3672837: *530759088 access forbidden by rule, client: 3.80.53.21 ...
show more
2026/08/28 16:43:59 [error] 3672837#3672837: *530759088 access forbidden by rule, client: 3.80.53.211, server: finami.ph, request: "GET /.vite/manifest.json HTTP/2.0", host: "finami.ph"
2026/08/28 16:44:00 [error] 3672837#3672837: *530759092 access forbidden by rule, client: 3.80.53.211, server: finami.ph, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "finami.ph"
2026/08/28 16:44:15 [error] 3672837#3672837: *530759086 access forbidden by rule, client: 3.80.53.211, server: finami.ph, request: "GET /admin/login HTTP/2.0", host: "finami.ph"
...
show less
Web App Attack
🇪🇸
el-brujo
2026-08-28 16:40:11
(6 hours ago)
Cloudflare WAF: Request Path: /.github/.env Request Query: Host: ns2.elhacker.net userAgent: Mozill ...
show more
Cloudflare WAF: Request Path: /.github/.env Request Query: Host: ns2.elhacker.net userAgent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot) Action: block Source: firewallManaged ASN Description: Amazon.com, Inc. Country: US Method: GET Timestamp: 2026-08-28T16:40:11Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇳🇱
BlueWire Hosting
2026-08-28 16:37:04
(6 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
Lee Daniel
2026-08-28 16:22:02
(6 hours ago)
3.80.53.211 - - [28/Aug/2026:12:22:01 -0400] "GET /.htpasswd HTTP/1.1" 403 6297 "-" "Mozilla/5.0 App ...
show more
3.80.53.211 - - [28/Aug/2026:12:22:01 -0400] "GET /.htpasswd HTTP/1.1" 403 6297 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:[email protected] "
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Trueforce Threat Report
2026-08-28 16:08:27
(7 hours ago)
Automated report, trolling for resource vulnerabilities
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-28 12:58:20
(10 hours ago)
Excessive multi-domain requests
Brute-Force
🇧🇷
mateus.vicente
2026-08-28 12:52:26
(10 hours ago)
[2026-08-28T12:52:26Z] Requests to sensitive Apache endpoints and path traversal patterns. (db-srv)
Brute-Force
Bad Web Bot
Web App Attack
2026-08-28 12:21:50
(10 hours ago)
Portscan: TCP/8443 (10x), TCP/8080 (11x)
Port Scan
2026-08-28 11:10:37
(12 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 09:58:51
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 3.80.53.211 (ec2-3-80-53-211.compute-1.amazonaw ...
show more
(mod_security) mod_security (id:210730) triggered by 3.80.53.211 (ec2-3-80-53-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 05:58:46.160703 2026] [security2:error] [pid 22003:tid 22009] [client 3.80.53.211:38062] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.adultbaja.com|F|2"] [data ".adultbaja.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.adultbaja.com"] [uri "/z9x8c7v6b5-debug-trigger-www.adultbaja.com"] [unique_id "apFb1gDNsu1bEGBnlsb0zgAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 09:43:26
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 3.80.53.211 (ec2-3-80-53-211.compute-1.amazonaw ...
show more
(mod_security) mod_security (id:210730) triggered by 3.80.53.211 (ec2-3-80-53-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 05:43:23.034572 2026] [security2:error] [pid 743693:tid 744426] [client 3.80.53.211:32892] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fishrapper.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fishrapper.com"] [uri "/rclone.conf"] [unique_id "apFYO8C5hovT9753mWaYrwAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack