🇫🇷
masterguru
2026-09-07 02:09:51
(8 hours ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
2026-09-07 01:11:31
(9 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇧🇪
cmbplf
2026-09-07 00:37:44
(9 hours ago)
271 requests with url.path */@fs/*
112 requests with url.path */proc/*
Brute-Force
Bad Web Bot
🇳🇱
Site.eu
2026-09-07 00:34:04
(9 hours ago)
Excessive multi-domain requests
Brute-Force
🇵🇱
sefinek.net
2026-09-07 00:26:14
(10 hours ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /wp/.env | UA: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
Erpelstolz
2026-09-07 00:18:51
(10 hours ago)
external host: 34.77.20.164 - - [07/Sep/2026:02:18:51 +0200] "GET /login HTTP/1.1" 301 300 "-" "Mozi ...
show more
external host: 34.77.20.164 - - [07/Sep/2026:02:18:51 +0200] "GET /login HTTP/1.1" 301 300 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" CF-Ray:- CF-IP:-
show less
Web App Attack
🇮🇹
CoreTech srl
2026-09-07 00:08:57
(10 hours ago)
cloudlinux2 fail2ban: 2026-09-07 02:04:47,888 fail2ban.filter [2048]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-07 02:04:47,888 fail2ban.filter [2048]: INFO [plesk-modsecurity] Found 59.182.68.93 - 2026-09-07 02:04:47cloudlinux2 fail2ban: 2026-09-07 02:05:07,073 fail2ban.filter [2048]: INFO [plesk-modsecurity] Found 34.77.20.164 - 2026-09-07 02:05:07cloudlinux2 fail2ban: 2026-09-07 02:05:06,623 fail2ban.filter [2048]: INFO [plesk-modsecurity] Found 34.77.20.164 - 2026-09-07 02:05:06cloudlinux2 fail2ban: 2026-09-07 02:05:06,632 fail2ban.filter [2048]: INFO [plesk-modsecurity] Found 34.77.20.164 - 2026-09-07 02:05:06cloudlinux2 fail2ban: 2026-09-07 02:05:07,084 fail2ban.filter [2048]: INFO [plesk-modsecurity] Found 34.77.20.164 - 2026-09-07 02:05:07cloudlinux2 fail2ban: 2026-09-07 02:05:07,096 fail2ban.filter [2048]: INFO [plesk-modsecurity] Found 34.77.20.164 - 2026-09-07 02:05:07cloudlinux2 fail2ban: 2026-09-07 02:05:07,433 fail2ban.filter [2048]: INFO [plesk-modsecurity] Found 34.77.20.164 - 2026-09-07 02:05:07cl
show less
Brute-Force
🇫🇷
Baking333
2026-09-06 23:57:51
(10 hours ago)
[redacted] 34.77.20.164 - - [07/Sep/2026:00:57:49 +0100] "GET /api/.env/public/.env HTTP/1.1" 302 16 ...
show more
[redacted] 34.77.20.164 - - [07/Sep/2026:00:57:49 +0100] "GET /api/.env/public/.env HTTP/1.1" 302 1611 0/49222 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://[redacted]/gptbot)" [redacted] 34.77.20.164 - - [07/Sep/2026:00:57:49 +0100] "GET //.env HTTP/1.1" 302 6798 0/47555 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://[redacted]/)"
show less
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-09-06 22:22:22
(12 hours ago)
2026/09/06 22:22:20 [error] 2635062#2635062: *564287110 access forbidden by rule, client: 34.77.20.1 ...
show more
2026/09/06 22:22:20 [error] 2635062#2635062: *564287110 access forbidden by rule, client: 34.77.20.164, server: fn.binixo.es, request: "GET /assets../.env HTTP/2.0", host: "console.boostika.org"
2026/09/06 22:22:21 [error] 2635062#2635062: *564287116 access forbidden by rule, client: 34.77.20.164, server: fn.binixo.es, request: "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/2.0", host: "console.boostika.org"
2026/09/06 22:22:21 [error] 2635066#2635066: *564287119 access forbidden by rule, client: 34.77.20.164, server: fn.binixo.es, request: "GET /uploads../.env HTTP/2.0", host: "console.boostika.org"
...
show less
Web App Attack
🇩🇪
maxpower
2026-09-06 22:21:45
(12 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.77.20.164 (BE/Belgium/164.20.77.34.bc ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.77.20.164 (BE/Belgium/164.20.77.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.77.20.164 - - [07/Sep/2026:00:21:43 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 200 4781 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "34.77.20.164" host=www.fdpimmobiliare.com
show less
Port Scan
2026-09-06 22:21:34
(12 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-06 22:20:08
(12 hours ago)
Brute-Force
Web App Attack
🇩🇪
Grossmann-Gruppe
2026-09-06 21:52:02
(12 hours ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
🇳🇱
Savvii
2026-09-06 21:45:35
(12 hours ago)
21 attempts against mh-misbehave-ban on tin
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 21:04:30
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.20.164 (164.20.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.20.164 (164.20.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 17:04:23.485239 2026] [security2:error] [pid 6270:tid 6270] [client 34.77.20.164:47128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bofill.name"] [uri "/.env.local"] [unique_id "ap3VV8sdIA6OpuYLnaJQcQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
