2026-10-01 14:05:09
(1 day ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇮🇹
VHosting
2026-10-01 14:05:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-01 14:00:08
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.budyn.wtf | URI: /.env.js | UA: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/) | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-10-01 12:59:04
(1 day ago)
(badbots) Bad bot user-agent [redacted] from 34.118.172.91 (CA/Canada/91.172.118.34.bc.googleusercon ...
show more
(badbots) Bad bot user-agent [redacted] from 34.118.172.91 (CA/Canada/91.172.118.34.bc.googleusercontent.com)
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-01 12:53:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.118.172.91 (91.172.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.172.91 (91.172.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 08:53:06.695578 2026] [security2:error] [pid 15603:tid 15603] [client 34.118.172.91:52960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.asiabeef.network"] [uri "/media../.env"] [unique_id "ar5XskoxhL84PHzh-t03wQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-01 12:00:12
(1 day ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇸🇪
vaia.cloud
2026-10-01 11:55:01
(1 day ago)
crowdsecurity/grafana-cve-2021-43798
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 11:54:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.118.172.91 (91.172.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.172.91 (91.172.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 07:54:20.696135 2026] [security2:error] [pid 28955:tid 28955] [client 34.118.172.91:56036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.teghekatu24.am"] [uri "/api/fs/read"] [unique_id "ar5J7DDYLvVV2GdgXexl-wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-10-01 11:52:58
(1 day ago)
34.118.172.91 - - [01/Oct/2026:13:52:57 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 ...
show more
34.118.172.91 - - [01/Oct/2026:13:52:57 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-01 11:45:42
(1 day ago)
[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.118.172.91 - - [01/Oct/2026:13:45:37 +0200] "GET /signin HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.118.172.91 - - [01/Oct/2026:13:45:37 +0200] "GET /auth/login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.118.172.91 - - [01/Oct/2026:13:45:37 +0200] "GET /model/info HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.118.172.91 - - [01/Oct/2026:13:45:37 +0200] "GET /account/login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win
...
show less
Bad Web Bot
Web App Attack
🇫🇷
LiloBzH
2026-10-01 11:07:02
(1 day ago)
34.118.172.91 - - [01/Oct/2026:13:06:54 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 ...
show more
34.118.172.91 - - [01/Oct/2026:13:06:54 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.118.172.91 - - [01/Oct/2026:13:07:00 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 200 5072 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
34.118.172.91 - - [01/Oct/2026:13:07:01 +0200] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 200 5072 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
show less
Web App Attack
