🇺🇸
mc4bbs
2026-08-22 04:05:00
(11 hours ago)
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ...
show more
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-json -> 404 UA=""; GET /.env.old -> 404 UA=""; GET /.git/config -> 404 UA=""; GET /.git/HEAD -> 404 UA=""; GET /.gitconfig -> 404 UA=""
show less
Web App Attack
Hacking
🇳🇱
Savvii
2026-08-22 03:45:58
(11 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2026-08-22 03:11:45
(12 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.26.129.240 (US/United States/240.129 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.26.129.240 (US/United States/240.129.26.34.bc.googleusercontent.com)
show less
SQL Injection
🇬🇧
consul.to
2026-08-22 01:54:55
(13 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Savvii
2026-08-22 01:08:04
(14 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MyGlobalFlowers
2026-08-21 23:35:07
(15 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
bazter.pro
2026-08-21 23:05:44
(16 hours ago)
Auto-Ban [2026-08-22 02:05:44]: CRITICAL: .env attack; DC: Google LLC [Paths: 237] | Details: Exploi ...
show more
Auto-Ban [2026-08-22 02:05:44]: CRITICAL: .env attack; DC: Google LLC [Paths: 237] | Details: Exploit trap paths: /config.php.bak, /configuration.php.bak, /.env.dev, /.env.swp, /public/.env | Sensitive files/paths: /config.php.bak, /configuration.php.bak, /.env.dev, /.env.swp, /public/.env | 404 errors (240): /app_dev.php/_profiler, /core/settings.py, /.ssh/authorized_keys, /actuator/configprops, /values.yaml, /env.json, /.ssh/id_ed25519, /private-key, /.pypirc, /service-account.json (and 227 more)
show less
Web App Attack
Hacking
🇧🇪
voormedia
2026-08-21 22:46:32
(16 hours ago)
Accessed trap at '/.aws/credentials'
Web App Attack
2026-08-21 21:11:48
(18 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇦🇹
Pingger Shikkoken
2026-08-21 16:36:50
(22 hours ago)
2026-08-21T16:36:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-08-21T16:36:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.26.129.240 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=32563 DF PROTO=TCP SPT=50234 DPT=80 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-21T16:36:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.26.129.240 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=19676 DF PROTO=TCP SPT=55522 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-21T16:36:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=34.26.129.240 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=19677 DF PROTO=TCP SPT=55522 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-21 02:28:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.26.129.240 (240.129.26.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.129.240 (240.129.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 22:28:00.738015 2026] [security2:error] [pid 16109:tid 16109] [client 34.26.129.240:55410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dragonflytunes.com"] [uri "/.git/config"] [unique_id "aoe3sJsoMPI-p3OklvDV4AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-21 02:27:57
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-08-21 02:05:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.26.129.240 (240.129.26.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.129.240 (240.129.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 22:04:58.915358 2026] [security2:error] [pid 10201:tid 10201] [client 34.26.129.240:36940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dragonfly.garden"] [uri "/.git/config"] [unique_id "aoeySvWw2gE_9BR-oZRDygAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-21 02:01:53
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:User-Agent. (1100000-195)
Bad Web Bot
🇷🇺
DZBOT
2026-08-21 01:56:15
(1 day ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack