π§π¬
alnaasd
2026-08-10 13:27:07
(2 weeks ago)
WAF block action triggered by rule set "Version Control - Information Disclosure" (24 occurrences ob ...
show more
WAF block action triggered by rule set "Version Control - Information Disclosure" (24 occurrences observed).
show less
Web App Attack
πΊπΈ
chrisj
2026-08-09 11:04:18
(2 weeks ago)
[Sun Aug 09 11:04:17.903723 2026] [proxy_fcgi:error] [pid 830888:tid 830906] [remote 34.175.50.169:5 ...
show more
[Sun Aug 09 11:04:17.903723 2026] [proxy_fcgi:error] [pid 830888:tid 830906] [remote 34.175.50.169:56738] AH01071: Got error 'Primary script unknown'
[Sun Aug 09 11:04:17.905086 2026] [proxy_fcgi:error] [pid 830888:tid 830908] [remote 34.175.50.169:56738] AH01071: Got error 'Primary script unknown'
[Sun Aug 09 11:04:17.905645 2026] [proxy_fcgi:error] [pid 830888:tid 830908] [remote 34.175.50.169:56738] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
π³π±
Savvii
2026-08-09 09:05:01
(2 weeks ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
chrisj
2026-08-09 08:52:10
(2 weeks ago)
[Sun Aug 09 08:52:09.891107 2026] [proxy_fcgi:error] [pid 830888:tid 830913] [remote 34.175.50.169:4 ...
show more
[Sun Aug 09 08:52:09.891107 2026] [proxy_fcgi:error] [pid 830888:tid 830913] [remote 34.175.50.169:47370] AH01071: Got error 'Primary script unknown'
[Sun Aug 09 08:52:09.946436 2026] [proxy_fcgi:error] [pid 830888:tid 830891] [remote 34.175.50.169:47370] AH01071: Got error 'Primary script unknown'
[Sun Aug 09 08:52:09.947363 2026] [proxy_fcgi:error] [pid 830888:tid 830894] [remote 34.175.50.169:47370] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
π¬π§
consul.to
2026-08-09 08:45:11
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
πΊπΈ
chrisj
2026-08-08 18:07:36
(2 weeks ago)
[Sat Aug 08 18:07:36.246751 2026] [proxy_fcgi:error] [pid 776969:tid 777017] [remote 34.175.50.169:5 ...
show more
[Sat Aug 08 18:07:36.246751 2026] [proxy_fcgi:error] [pid 776969:tid 777017] [remote 34.175.50.169:58418] AH01071: Got error 'Primary script unknown'
[Sat Aug 08 18:07:36.349278 2026] [proxy_fcgi:error] [pid 776969:tid 777011] [remote 34.175.50.169:58418] AH01071: Got error 'Primary script unknown'
[Sat Aug 08 18:07:36.429212 2026] [proxy_fcgi:error] [pid 776969:tid 777021] [remote 34.175.50.169:58418] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
π«π·
masterguru
2026-08-08 17:55:03
(2 weeks ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-201)
show less
Bad Web Bot
π©πͺ
BlueWire Hosting
2026-08-08 16:25:35
(2 weeks ago)
Bad bot ignoring robot.txt
Bad Web Bot
πΊπΈ
H24
2026-08-08 15:39:29
(2 weeks ago)
/credentials.json /.github/.env /config/.env /backend/.env /.env.bak /.git/HEAD /api/.env /.git/conf ...
show more
/credentials.json /.github/.env /config/.env /backend/.env /.env.bak /.git/HEAD /api/.env /.git/config /wp-json /.git-credentials
show less
Web App Attack
π«π·
masterguru
2026-08-08 12:45:40
(2 weeks ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
π¨π
4server
2026-08-08 11:46:29
(2 weeks ago)
[SatAug0813:46:24.3036742026][security2:error][pid2603087:tid2603291][client34.175.50.169:0]ModSecur ...
show more
[SatAug0813:46:24.3036742026][security2:error][pid2603087:tid2603291][client34.175.50.169:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".com\"][severity\"ERROR\"][hostname\"flyingberber.com\"][uri\"/z9x8c7v6b5-debug-trigger-flyingberber.com\"][unique_id\"ancXEMFWzsDE9CbTVtdexwAAAIs\"]
show less
Hacking
Web App Attack
π¨π
dalslab ltd
2026-08-08 11:39:55
(2 weeks ago)
[08/Aug/2026:13:39:55 +0200] - 404 404 - GET https vault.dalslab.com "/wp-json" [Client 34.175.50.16 ...
show more
[08/Aug/2026:13:39:55 +0200] - 404 404 - GET https vault.dalslab.com "/wp-json" [Client 34.175.50.169] [Length 832] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (compatible; Bytespider; [email protected] )" "-"
[08/Aug/2026:13:39:55 +0200] - 404 404 - GET https vault.dalslab.com "/rclone.conf" [Client 34.175.50.169] [Length 832] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (compatible; Bytespider; [email protected] )" "-"
[08/Aug/2026:13:39:55 +0200] - 404 404 - GET https vault.dalslab.com "/assets/manifest.json" [Client 34.175.50.169] [Length 832] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "-"
[08/Aug/2026:13:39:55 +0200] - 422 422 - GET https vault.dalslab.com "/config/.env.php" [Client 34.175.50.169] [Length 496] [Gzip -] [Sent-to 10.1.1.248] "Mozilla/5.0 (compatible; Bytespider; [email protected] )" "-"
[08/Aug/2026:13:39:55 +0200
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
Marc
2026-08-08 11:27:52
(2 weeks ago)
34.175.50.169 - - [08/Aug/2026:13:27:52 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 Appl ...
show more
34.175.50.169 - - [08/Aug/2026:13:27:52 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] " 34.175.50.169 - - [08/Aug/2026:13:27:52 +0200] "GET /.git/HEAD HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] " 34.175.50.169 - - [08/Aug/2026:13:27:52 +0200] "GET /.gitconfig HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] "
show less
Brute-Force
π©πͺ
LRob
2026-08-08 11:05:14
(2 weeks ago)
CrowdSec: crowdsecurity/http-probing | req: /dist/manifest.json | 11 distinct paths | UA: Mozilla/5. ...
show more
CrowdSec: crowdsecurity/http-probing | req: /dist/manifest.json | 11 distinct paths | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
Port Scan
Web App Attack
π³π±
Site.eu
2026-08-08 10:40:18
(2 weeks ago)
Excessive multi-domain requests
Brute-Force