🇪🇸
Gem
2026-06-13 05:59:38
(2 weeks ago)
Unauthorized web scan.
Web App Attack
2026-06-13 03:11:47
(2 weeks ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇩🇪
IVski
2026-06-12 02:47:44
(2 weeks ago)
IVski WAF | Sensitive file probe detected - looking for config, backups or credentials
Port Scan
Brute-Force
Web App Attack
2026-06-12 02:12:11
(2 weeks ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2026-06-11 22:33:12
(2 weeks ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-11 21:59:42
(2 weeks ago)
Auto-ban: 284 malicious requests on 2026-06-10 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 284 malicious requests on 2026-06-10 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-06-11 21:59:03
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
2026-06-11 20:10:25
(2 weeks ago)
34.141.123.66 - - [11/Jun/2026:22:10:24 +0200] "GET /actuator/trace HTTP/1.1" 403 7933 "-" "Mozilla/ ...
show more
34.141.123.66 - - [11/Jun/2026:22:10:24 +0200] "GET /actuator/trace HTTP/1.1" 403 7933 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-N950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"
34.141.123.66 - - [11/Jun/2026:22:10:24 +0200] "GET /actuator/env HTTP/1.1" 403 7933 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-CN; Mi Note 3 Build/OPM1.171019.019) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.9.1039 Mobile Safari/537.36"
34.141.123.66 - - [11/Jun/2026:22:10:24 +0200] "GET /actuator/threaddump HTTP/1.1" 403 7933 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3887.7 Safari/537.36"
34.141.123.66 - - [11/Jun/2026:22:10:24 +0200] "GET /actuator/logfile HTTP/1.1" 403 7933 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
34.141.123.66 - - [11/Jun/2026:22:10:24 +0200] "GET /actuator/heapdum
...
show less
DDoS Attack
🇺🇸
kosada.com
2026-06-11 19:14:41
(2 weeks ago)
Web vulnerability probing: /.config/gcloud/credentials.db
Web App Attack
🇺🇸
xxkodedxx
2026-06-11 16:01:22
(2 weeks ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get, 7× edge-block ...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get, 7× edge-block in 10m window.
Origin: DE / AS396982 Google LLC
Active: 16:01:17→16:01:19 UTC
Volume: 320 HTTP req, 67 honeypot probe(s)
Bait taken: /wp-config.txt, /wp-config.php~, /wp-config.bak, /wp-config.php.bak, /wp-config.php
Status mix: 301×313 444×7
UA: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-06-11 15:52:56
(2 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
grassau.com
2026-06-11 14:42:43
(2 weeks ago)
*Port Scan* detected from 34.141.123.66 (DE/Germany/Hesse/Frankfurt am Main/66.123.141.34.bc.googleu ...
show more
*Port Scan* detected from 34.141.123.66 (DE/Germany/Hesse/Frankfurt am Main/66.123.141.34.bc.googleusercontent.com).
show less
Port Scan
🇳🇱
Cloud86 B.V.
2026-06-11 14:39:07
(2 weeks ago)
categories: DDoS Attack
DDoS Attack
🇬🇧
consul.to
2026-06-11 11:35:39
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
CryptoYakari
2026-06-11 09:24:42
(2 weeks ago)
34.141.123.66 - - [11/Jun/2026:12:24:39 +0300] "GET /actuator/trace HTTP/1.0" 404 6840 "-" "Mozilla/ ...
show more
34.141.123.66 - - [11/Jun/2026:12:24:39 +0300] "GET /actuator/trace HTTP/1.0" 404 6840 "-" "Mozilla/5.0 (SymbianOS/9.1; U; en-us) AppleWebKit/413 (KHTML, like Gecko) Safari/413 es50"
34.141.123.66 - - [11/Jun/2026:12:24:39 +0300] "GET /api/actuator/env HTTP/1.0" 404 6840 "-" "Mozilla/5.0 (iPod touch; CPU iPhone OS 7_1 like Mac OS X) AppleWebKit/537.51.2 (KHTML like Gecko) Version/7.0 Mobile/11D167 Safari/123E71C"
34.141.123.66 - - [11/Jun/2026:12:24:39 +0300] "GET /configprops HTTP/1.0" 404 6840 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36"
34.141.123.66 - - [11/Jun/2026:12:24:39 +0300] "GET /v2/actuator/env HTTP/1.0" 404 6840 "-" "Mozilla/5.0 (X11; Linux i686 (x86_64)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.130 Safari/537.36"
34.141.123.66 - - [11/Jun/2026:12:24:39 +0300] "GET /actuator/logfile HTTP/1.0" 404 6840 "-" "Mozilla/5.0 (Mobile; Windows Phone 8.1; Android 4.0; ARM; Trident/7.0; Touch;
...
show less
Web Spam
Blog Spam
Web App Attack
Bad Web Bot