🇫🇮
oh.mg
2026-09-06 17:55:36
(1 hour ago)
[Sun Sep 06 19:55:35.279806 2026] [security2:error] [pid 234959:tid 234977] [client 34.118.243.155:4 ...
show more
[Sun Sep 06 19:55:35.279806 2026] [security2:error] [pid 234959:tid 234977] [client 34.118.243.155:4996] [client 34.118.243.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/media../.env"] [unique_id "ap2pF_8oxg5I7165ZCzLcQAAAIg"]
[Sun Sep 06 19:55:35.623791 2026] [security2:error] [pid 236339:tid 236356] [client 34.118.243.155:5006] [client 34.118.243.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"]
...
show less
Web App Attack
Bad Web Bot
🇩🇪
Guardian
2026-09-06 15:50:43
(3 hours ago)
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retr ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x2), Unauthorized attempt to retrieve configuration file (x2)
34.118.243.155 [06/Sep/2026:17:50:42 +0200] "GET / HTTP/1.1"
34.118.243.155 [06/Sep/2026:17:50:42 +0200] "GET /__aws_leak_probe_d6b22e57__ HTTP/1.1"
34.118.243.155 [06/Sep/2026:17:50:43 +0200] "GET /static../.env HTTP/1.1"
34.118.243.155 [06/Sep/2026:17:50:43 +0200] "GET /media../.env HTTP/1.1"
show less
Port Scan
Web App Attack
🇪🇸
librebit
2026-09-06 07:34:40
(12 hours ago)
Bad guys doing bad things, bad crawling
Bad Web Bot
🇷🇸
Scan
2026-09-06 01:53:21
(17 hours ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇵🇹
rooster
2026-09-05 22:28:24
(21 hours ago)
[05/Sep/2026:23:28:22 +0100] 404 - GET http 109.49.176.159 "/__aws_leak_probe_7f62ec28__" [Client 34 ...
show more
[05/Sep/2026:23:28:22 +0100] 404 - GET http 109.49.176.159 "/__aws_leak_probe_7f62ec28__" [Client 34.118.243.155] [Length 183] [Gzip 3.21] "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/151.0.2284.82 Mobile Safari/537.36" "-"
[05/Sep/2026:23:28:22 +0100] 404 - GET http 109.49.176.159 "/static../.env" [Client 34.118.243.155] [Length 122] [Gzip 1.35] "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.4 Mobile/15E148 Safari/604.1; compatible; Google-Extended/1.0; +http://www.google.com/bot.html" "-"
[05/Sep/2026:23:28:22 +0100] 404 - GET http 109.49.176.159 "/static../.azure/credentials" [Client 34.118.243.155] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" "-"
[05/Sep/2026:23:28:22 +0100] 404 - GET http 109.49.176.159 "/.azure/credentials" [Client 3
...
show less
Hacking
Web App Attack
🇫🇷
a.mohamed.go
2026-09-05 14:46:34
(1 day ago)
34.118.243.155 - - [05/Sep/2026:14:46:34 +0000] "GET /?file=../../../../etc/passwd HTTP/1.1" 301 169 ...
show more
34.118.243.155 - - [05/Sep/2026:14:46:34 +0000] "GET /?file=../../../../etc/passwd HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php) Version/17.3 Mobile/15E148 Safari/604.1"
...
show less
Hacking
Web App Attack
🇧🇾
lns.bz
2026-09-05 14:45:02
(1 day ago)
.env scanning [BY]
Web App Attack
🇹🇭
MWA SOC
2026-09-05 11:01:23
(1 day ago)
Hacking
🇧🇪
cmbplf
2026-09-05 04:33:13
(1 day ago)
113 requests with url.path *.aws/*
Brute-Force
Bad Web Bot
🇳🇿
Antinson
2026-09-05 00:17:04
(1 day ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
MPL
2026-09-04 23:57:20
(1 day ago)
tcp port scan (8 or more attempts)
Port Scan
🇫🇷
Eldeberen
2026-09-04 21:34:05
(1 day ago)
Vulnerability scan attempt through HTTP protocol
Web App Attack
🇩🇪
Phenix Info
2026-09-04 20:45:22
(1 day ago)
SmallGuard.fr/Prestashop Forbidden Ext.
Web App Attack
Anonymous
2026-09-04 12:12:00
(2 days ago)
Spring.Boot.Actuator.Unauthorized.Access
Hacking
🇩🇪
Admins@FBN
2026-09-04 03:11:37
(2 days ago)
FW-PortScan: Traffic Blocked srcport=33416 dstport=8080
Port Scan