2026-06-12 15:11:21
(6 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CL, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CL, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-12 03:58:40
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
updown.io
2026-06-11 23:21:34
(1 week ago)
{"level":"info","ts":1781220094.0150294,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781220094.0150294,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.176.241.4","remote_port":"60706","client_ip":"34.176.241.4","proto":"HTTP/1.1","method":"GET","host":"status.maytapi.com","uri":"/api/.env.old","headers":{"User-Agent":["SonyEricssonK800i/R1CB Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.0.0.0"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.maytapi.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000898147,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1781220094.0260973,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.176.241.4","remote_port":"60822","client_ip":"34.176.241.4","proto":"HTTP/1.1","method":"GET","host":"status.maytapi.
...
show less
DDoS Attack
Web App Attack
🇧🇪
Saec
2026-06-11 16:30:03
(1 week ago)
Jarvis auto-ban: CF top attacker on saec.me (150 hits, CL)
Port Scan
Web App Attack
2026-06-11 15:58:48
(1 week ago)
(caddyscan) Scanner path probe from 34.176.241.4 (CL/Chile/4.241.176.34.bc.googleusercontent.com): 5 ...
show more
(caddyscan) Scanner path probe from 34.176.241.4 (CL/Chile/4.241.176.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.176.241.4 - - [11/Jun/2026:15:58:46 +0000] "GET /.env.prod.bak HTTP/1.1"
[REDACTED] 200 2627 34.176.241.4 - - [11/Jun/2026:15:58:46 +0000] "GET /.env.demo HTTP/1.1"
[REDACTED] 200 2627 34.176.241.4 - - [11/Jun/2026:15:58:46 +0000] "GET /.env.testing HTTP/1.1"
[REDACTED] 200 2627 34.176.241.4 - - [11/Jun/2026:15:58:46 +0000] "GET /.env.sample HTTP/1.1"
[REDACTED] 200 2627 34.176.241.4 - - [11/Jun/2026:15:58:46 +0000] "GET /.env.example HTTP/1.1"
show less
Port Scan
🇳🇱
Cloud86 B.V.
2026-06-11 14:52:03
(1 week ago)
categories: DDoS Attack
DDoS Attack
2026-06-11 14:06:13
(1 week ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CL, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CL, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-06-11 13:21:06
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-11 12:39:32
(1 week ago)
[Thu Jun 11 22:39:32.543718 2026] [security2:error] [pid 523911] [client 34.176.241.4:48528] [client ...
show more
[Thu Jun 11 22:39:32.543718 2026] [security2:error] [pid 523911] [client 34.176.241.4:48528] [client 34.176.241.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/.env.prod"] [unique_id "aiqshJR57gZBavM4MBA9fAAAAAg"]
...
show less
Web App Attack
🇩🇪
webanyone
2026-06-11 06:30:28
(1 week ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-06-11 05:10:12
(1 week ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-06-11 04:17:57
(1 week ago)
Mutliple attempts to access forbidden web resources, HTTP code 403.
Web App Attack
🇩🇪
Petros Stefanakis
2026-06-11 04:05:50
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.176.241.4 (CL/Chile/4.241.176.34.bc. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.176.241.4 (CL/Chile/4.241.176.34.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
iNetWorker
2026-06-11 01:06:16
(1 week ago)
trolling for resource vulnerabilities
Web App Attack
2026-06-10 10:54:32
(1 week ago)
(caddyscan) Scanner path probe from 34.176.241.4 (CL/Chile/4.241.176.34.bc.googleusercontent.com): 5 ...
show more
(caddyscan) Scanner path probe from 34.176.241.4 (CL/Chile/4.241.176.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.176.241.4 - - [10/Jun/2026:10:54:31 +0000] "GET /.env.prod.bak HTTP/1.1"
[REDACTED] 200 2627 34.176.241.4 - - [10/Jun/2026:10:54:31 +0000] "GET /.env.live HTTP/1.1"
[REDACTED] 200 2627 34.176.241.4 - - [10/Jun/2026:10:54:31 +0000] "GET /.env.bak HTTP/1.1"
[REDACTED] 200 2627 34.176.241.4 - - [10/Jun/2026:10:54:31 +0000] "GET /.env.dev.local HTTP/1.1"
[REDACTED] 200 2627 34.176.241.4 - - [10/Jun/2026:10:54:31 +0000] "GET /.env.production HTTP/1.1"
show less
Port Scan