Anonymous
2026-10-09 02:22:03
(3 days ago)
CrowdSec detection: crowdsecurity/appsec-native
Web App Attack
Anonymous
2026-10-09 01:35:10
(3 days ago)
[Thu Oct 08 21:32:31.126358 2026] [authz_core:error] [pid 16869] [client 34.186.60.118:19558] AH0163 ...
show more
[Thu Oct 08 21:32:31.126358 2026] [authz_core:error] [pid 16869] [client 34.186.60.118:19558] AH01630: client denied by server configuration: /home/taxbrackets/public_html/public/.htpasswd
[Thu Oct 08 21:33:00.067643 2026] [authz_core:error] [pid 16155] [client 34.186.60.118:10606] AH01630: client denied by server configuration: /home/taxrates-legacy/public_html/.htpasswd
[Thu Oct 08 21:33:10.900188 2026] [access_compat:error] [pid 16338] [client 34.186.60.118:17262] AH01797: client denied by server configuration: /home/taxrates-legacy/public_html/server-status
[Thu Oct 08 21:34:39.918691 2026] [authz_core:error] [pid 16807] [client 34.186.60.118:13802] AH01630: client denied by server configuration: /home/taxassessors/public_html/.htpasswd
[Thu Oct 08 21:34:49.619385 2026] [access_compat:error] [pid 17637] [client 34.186.60.118:9602] AH01797: client denied by server configuration: /home/taxassessors/public_html/server-status
...
show less
Brute-Force
Anonymous
2026-10-09 01:33:00
(3 days ago)
Fail2Ban apache-noscript
Bad Web Bot
๐ซ๐ท
โจ
2026-10-09 01:26:08
(3 days ago)
Domain : tavistockbrewery.co.uk
Rule : hack
2026-10-09 01:24:51 ***hidden-privacy*** GET /api/proc/s ...
show more
Domain : tavistockbrewery.co.uk
Rule : hack
2026-10-09 01:24:51 ***hidden-privacy*** GET /api/proc/self/environ - 443 - 34.186.60.118 HTTP/2 Mozilla/5.0 (compatible; Qwenbot/1.0; https://qwen.alibaba.com/) - tavistockbrewery.co.uk 404 0 2 12893 500 86 - -
show less
Hacking
SQL Injection
Brute-Force
๐ฌ๐ท
setupgr
2026-10-09 01:23:04
(3 days ago)
(mod_security) mod_security (id:11000011) triggered by 34.186.60.118 (US/United States/District of C ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.186.60.118 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Oct 09 04:22:58.974592 2026] [security2:error] [pid 438150:tid 438218] [remote 34.186.60.118:52274] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 118.60.186.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "tavernadimitris.com"] [uri "/"] [unique_id "ashB8ulRsrmWxXJmsTYKiAAB0Q0"]
show less
Port Scan
๐บ๐ธ
entangled_mongoose
2026-10-09 01:06:17
(3 days ago)
Probed /wp-json.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 00:58:25
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.186.60.118 (118.60.186.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.186.60.118 (118.60.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:58:21.902330 2026] [security2:error] [pid 2384:tid 2384] [client 34.186.60.118:58296] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tatethegreat.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tatethegreat.com"] [uri "/z9x8c7v6b5-debug-trigger-tatethegreat.com"] [unique_id "asg8LZeCPCyOchk-rwGsHgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 00:20:49
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.186.60.118 (118.60.186.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.186.60.118 (118.60.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:20:43.977264 2026] [security2:error] [pid 4805:tid 4805] [client 34.186.60.118:37128] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||taschstudios.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "taschstudios.com"] [uri "/z9x8c7v6b5-debug-trigger-taschstudios.com"] [unique_id "asgzWxEK956MocCkvn7z-gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
arnisolutions
2026-10-09 00:20:37
(3 days ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ...
show more
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-10-09 and 2026-10-09 (UTC). Sample request: GET /secrets.json HTTP/2.0
show less
Web App Attack
Hacking
๐ซ๐ท
masterguru
2026-10-09 00:20:10
(3 days ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
๐ฎ๐ช
tarlabs
2026-10-09 00:00:32
(3 days ago)
IP banned by Fail2Ban (traefik-404 jail)
Web App Attack
๐ซ๐ท
Catalin Negru
2026-10-08 23:51:14
(3 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
๐ง๐ท
dominioz
2026-10-08 23:49:19
(3 days ago)
2026-10-08 23:49:01 GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ raw?? - 34.186.60.118 HTTP/2 ...
show more
2026-10-08 23:49:01 GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ raw?? - 34.186.60.118 HTTP/2 Mozilla/5.0+(compatible;+Bravebot/1.0;++https://brave.com/search/) - 301 474
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-08 23:49:00
(3 days ago)
20 attempts against mh-misbehave-ban on ceres
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-10-08 23:18:21
(3 days ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 ( ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/) (+4 more) | path: /build/manifest.json, /jk155svo1vktm5zbc854, /.vite/manifest.json (+8 more)
show less
Bad Web Bot