🇩🇪
ghostwarriors
2026-10-23 03:50:05
(30 minutes ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
Hazzard
2026-10-23 03:48:50
(31 minutes ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇪🇸
elcruzado.es
2026-10-23 03:48:33
(31 minutes ago)
(mod_security) mod_security triggered on hostname [redacted] 34.22.116.147 (BE/Belgium/147.116.22.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.22.116.147 (BE/Belgium/147.116.22.34.bc.googleusercontent.com)
show less
SQL Injection
🇫🇷
ELYAZ
2026-10-23 03:45:30
(35 minutes ago)
(y3) Failed access -byebye- from 34.22.116.147 (BE/Belgium/147.116.22.34.bc.googleusercontent.com): ...
show more
(y3) Failed access -byebye- from 34.22.116.147 (BE/Belgium/147.116.22.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-23 03:34:15
(46 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.22.116.147 (147.116.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.116.147 (147.116.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 23:34:09.256250 2026] [security2:error] [pid 25604:tid 25604] [client 34.22.116.147:50966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eileensinc.cathrynn.com"] [uri "/.git/config"] [unique_id "atrVsUX4ixm9He2GcO9oQgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-23 03:27:58
(52 minutes ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇩🇪
yitzhaq
2026-10-23 03:26:47
(53 minutes ago)
34.22.116.147 - - [23/Oct/2026:05:26:45 +0200] "GET /.env.backup HTTP/2.0" 301 58 "-" "Mozilla/5.0 ( ...
show more
34.22.116.147 - - [23/Oct/2026:05:26:45 +0200] "GET /.env.backup HTTP/2.0" 301 58 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.116.147 - - [23/Oct/2026:05:26:45 +0200] "GET /appsettings.json HTTP/2.0" 301 61 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.116.147 - - [23/Oct/2026:05:26:45 +0200] "GET /.env.bak HTTP/2.0" 301 56 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.116.147 - - [23/Oct/2026:05:26:45 +0200] "GET /vendor/composer/installed.json HTTP/2.0" 301 71 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.116.147 - - [23/Oct/2026:05:26:45 +0200] "GET /env.js HTTP/2.0" 301 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.116.147 - - [23/Oct/2026:05:26:45 +0200] "GET /.aws/.env HTTP/2.0" 301 57 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.116.147 - - [23/Oct/2026:05:26:45 +0200] "GET /config/.env HTTP/2.0" 301 58 "-" "Mozil
show less
Web App Attack
Hacking
2026-10-23 03:25:01
(55 minutes ago)
Bot / scanning and/or hacking attempts: GET /.env.aws HTTP/2.0, [0/0] init, GET / HTTP/2.0
Hacking
Web App Attack
🇫🇷
masterguru
2026-10-23 03:21:50
(58 minutes ago)
Restricted File Access Attempt. Matched phrase "Dockerfile" at REQUEST_FILENAME. (930130-135)
Hacking
Web App Attack
🇷🇴
clauss
2026-10-23 03:17:42
(1 hour ago)
34.22.116.147 - - [23/Oct/2026:06:17:42 +0300] "GET /phpinfo HTTP/2.0" 404 1816 "-" "Mozilla/5.0 (Wi ...
show more
34.22.116.147 - - [23/Oct/2026:06:17:42 +0300] "GET /phpinfo HTTP/2.0" 404 1816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.116.147 - - [23/Oct/2026:06:17:42 +0300] "GET /config.json HTTP/2.0" 404 1815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
🇺🇸
Matthew Ping
2026-10-23 03:15:01
(1 hour ago)
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on dedicated4785.
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-10-23 03:13:30
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.22.116.147 (147.116.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.116.147 (147.116.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 23:13:24.300839 2026] [security2:error] [pid 13420:tid 13420] [client 34.22.116.147:42164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edupal.angeltarrac.com"] [uri "/.git/config"] [unique_id "atrQ1JQnp39LvF4xhFC0TAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2026-10-23 03:13:11
(1 hour ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted])
Port Scan
🇺🇸
WizardsToolkit
2026-10-23 03:05:33
(1 hour ago)
tried to access forbidden files; attempted to access /404.php
Web App Attack
🇩🇰
HostingGroup
2026-10-23 03:01:55
(1 hour ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 3. First blocked: 2026-10-23.
show less
Bad Web Bot
Web App Attack