๐ฎ๐น
VHosting
2026-08-09 12:35:03
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-09 11:43:27
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
consul.to
2026-08-09 05:52:52
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
bazter.pro
2026-08-09 03:33:15
(2 weeks ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
mccsoft.io
2026-08-09 02:51:16
(2 weeks ago)
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ...
show more
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received).
show less
Bad Web Bot
Web App Attack
๐น๐ท
ycoskun41
2026-08-09 01:41:27
(2 weeks ago)
fail2ban: plesk-modsecurity jail on genckocaeli.com
Web App Attack
๐ซ๐ท
masterguru
2026-08-09 01:16:39
(2 weeks ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
๐บ๐ธ
Victor Lรณpez
2026-08-09 00:30:49
(2 weeks ago)
videoprenatal.com 34.47.246.95 - - [08/Aug/2026:19:30:46 -0500] "GET /.git/HEAD HTTP/2.0" 404 18944 ...
show more
videoprenatal.com 34.47.246.95 - - [08/Aug/2026:19:30:46 -0500] "GET /.git/HEAD HTTP/2.0" 404 18944 "https://www.videoprenatal.com/.git/HEAD" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" -
videoprenatal.com 34.47.246.95 - - [08/Aug/2026:19:30:46 -0500] "GET /.git/config HTTP/2.0" 404 18942 "https://www.videoprenatal.com/.git/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" -
videoprenatal.com 34.47.246.95 - - [08/Aug/2026:19:30:48 -0500] "GET /.git-credentials HTTP/2.0" 404 18947 "https://www.videoprenatal.com/.git-credentials" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" -
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
Bouncer
2026-08-08 23:37:55
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.47.246.95 (IN/India/95.246.47.34.bc.googleus ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.246.95 (IN/India/95.246.47.34.bc.googleusercontent.com): 5 in the last 60 secs
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-08 21:51:29
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.47.246.95 (95.246.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.246.95 (95.246.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 17:51:25.260354 2026] [security2:error] [pid 10116:tid 10116] [client 34.47.246.95:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sportsbookcommission.com"] [uri "/.git/HEAD"] [unique_id "anek3WpqVjZb8bkNZsIj5AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ฌ
anotherwatcher
2026-08-08 16:12:14
(2 weeks ago)
bad bot
Bad Web Bot
๐ช๐ธ
elcruzado.es
2026-08-08 15:34:44
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.47.246.95 (IN/India/95.246.47.34.bc. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.47.246.95 (IN/India/95.246.47.34.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-08-08 15:26:50
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.47.246.95 (95.246.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.246.95 (95.246.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 11:26:44.550063 2026] [security2:error] [pid 1196009:tid 1196009] [client 34.47.246.95:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.swarnar.com|F|2"] [data ".swarnar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.swarnar.com"] [uri "/z9x8c7v6b5-debug-trigger-www.swarnar.com"] [unique_id "andKtCphkojZBwjRqSpE0AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-08 15:08:18
(2 weeks ago)
34.47.246.95 - - [08/Aug/2026:10:08:10 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compati ...
show more
34.47.246.95 - - [08/Aug/2026:10:08:10 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.47.246.95
34.47.246.95 - - [08/Aug/2026:10:08:10 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.47.246.95
34.47.246.95 - - [08/Aug/2026:10:08:10 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.47.246.95
34.47.246.95 - - [08/Aug/2026:10:08:10 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.47.246.95
34.47.246.95 - - [08/Aug/2026:10:08:10 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.47.246.95
34.47.246.95 - - [08/Aug/2026:10:08:10 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://w
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Ba-Yu
2026-08-08 12:38:15
(2 weeks ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack