🇳🇱
MyGlobalFlowers
2026-09-17 04:06:15
(2 minutes ago)
Multiple WAF Violations
Web App Attack
🇩🇪
konseptit
2026-09-17 02:29:26
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted] 34.74.56.73 (US/United States/73.56.74. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.74.56.73 (US/United States/73.56.74.34.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
netclix.gr
2026-09-17 02:22:35
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted] 34.74.56.73 (US/United States/73.56.74. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.74.56.73 (US/United States/73.56.74.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-17 02:14:27
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.74.56.73 (73.56.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.74.56.73 (73.56.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:14:21.190280 2026] [security2:error] [pid 17462:tid 17462] [client 34.74.56.73:37122] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||koolcoastalnights.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "koolcoastalnights.com"] [uri "/rclone.conf"] [unique_id "aqtM_Tdqk2KT7BdUzFS91gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-17 02:14:17
(1 hour ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
helios.live
2026-09-17 02:12:17
(1 hour ago)
2026/09/17 02:12:12 [error] 1105421#1105421: *3462874 access forbidden by rule, client: 34.74.56.73, ...
show more
2026/09/17 02:12:12 [error] 1105421#1105421: *3462874 access forbidden by rule, client: 34.74.56.73, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/17 02:12:12 [error] 1105421#1105421: *3462882 access forbidden by rule, client: 34.74.56.73, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/17 02:12:16 [error] 1105421#1105421: *3462891 access forbidden by rule, client: 34.74.56.73, server: kocerroxy.com, request: "GET /.docker/config.json HTTP/1.1", host: "kocerroxy.com"
2026/09/17 02:12:16 [error] 1105421#1105421: *3462949 access forbidden by rule, client: 34.74.56.73, server: kocerroxy.com, request: "GET /.npmrc HTTP/1.1", host: "kocerroxy.com"
2026/09/17 02:12:17 [error] 1105421#1105421: *3462891 access forbidden by rule, client: 34.74.56.73, server: kocerroxy.com, request: "GET /.s3cfg HTTP/1.1", host: "kocerroxy.com"
...
show less
Web App Attack
🇳🇱
e.fierstra
2026-09-17 01:49:25
(2 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-09-17 01:36:24
(2 hours ago)
IP banned by Fail2Ban in jail its-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-17 01:25:20
(2 hours ago)
Aggressive scanning resulting into 404
Bad Web Bot
🇮🇹
CoreTech srl
2026-09-17 01:23:56
(2 hours ago)
cloudlinux2 fail2ban: 2026-09-17 03:19:19,658 fail2ban.filter [1818]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-17 03:19:19,658 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.74.56.73 - 2026-09-17 03:19:19cloudlinux2 fail2ban: 2026-09-17 03:19:19,648 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.74.56.73 - 2026-09-17 03:19:19cloudlinux2 fail2ban: 2026-09-17 03:19:19,744 fail2ban.filter [1818]: INFO [recidive] Found 34.74.56.73 - 2026-09-17 03:19:19cloudlinux2 fail2ban: 2026-09-17 03:19:19,737 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Ban 34.74.56.73cloudlinux2 fail2ban: 2026-09-17 03:19:19,638 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.74.56.73 - 2026-09-17 03:19:19cloudlinux2 fail2ban: 2026-09-17 03:19:59,765 fail2ban.filter [1818]: INFO [plesk-wordpress] Found 178.164.202.128 - 2026-09-17 03:19:59cloudlinux2 fail2ban: 2026-09-17 03:20:40,053 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Unban 35.185.71.33cloudlinux2 fail2ban: 2026-09-17 03:21:42,631 fail2ban.filter
show less
Web App Attack
🇺🇸
H24
2026-09-17 00:58:32
(3 hours ago)
/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ /js../.env /dist/.env /.env /utils/ ...
show more
/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ /js../.env /dist/.env /.env /utils/.env /laravel/.env /common/.env /static//home/user/.env /@fs/.env /@fs/app/.env
show less
Web App Attack
2026-09-17 00:19:43
(3 hours ago)
Banned by Fail2Ban on server
Web App Attack
2026-09-16 23:59:47
(4 hours ago)
Aggressive web scan
Web App Attack
🇩🇪
macrob
2026-09-16 23:35:54
(4 hours ago)
2026/09/16 23:35:52 [error] 2961658#2961658: *6212234 access forbidden by rule, client: 34.74.56.73, ...
show more
2026/09/16 23:35:52 [error] 2961658#2961658: *6212234 access forbidden by rule, client: 34.74.56.73, server: finami.mx, request: "GET /secrets.env HTTP/2.0", host: "finami.mx"
2026/09/16 23:35:53 [error] 2961663#2961663: *6211276 access forbidden by rule, client: 34.74.56.73, server: finami.mx, request: "GET /config/env/aws_credentials.env HTTP/2.0", host: "finami.mx"
2026/09/16 23:35:53 [error] 2961662#2961662: *6203911 access forbidden by rule, client: 34.74.56.73, server: finami.mx, request: "GET /.ssh/id_rsa HTTP/2.0", host: "finami.mx"
...
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-09-16 23:31:42
(4 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack