🇵🇱
MatStef132
2026-10-18 08:31:07
(14 minutes ago)
MatShield L7: blocked on test-clean.mathost.eu (suspicious behaviour)
DDoS Attack
🇳🇱
melroy89
2026-10-18 08:27:56
(17 minutes ago)
34.79.202.206 - - [18/Oct/2026:10:26:56 +0200] "GET /@fs/urandom HTTP/1.1" 403 524 "" "Mozilla/5.0 ( ...
show more
34.79.202.206 - - [18/Oct/2026:10:26:56 +0200] "GET /@fs/urandom HTTP/1.1" 403 524 "" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" "gitlab.melroy.org" 0.002 gate=not_checked
34.79.202.206 - - [18/Oct/2026:10:26:56 +0200] "GET /.env.production HTTP/1.1" 403 524 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" "gitlab.melroy.org" 0.002 gate=not_checked
34.79.202.206 - - [18/Oct/2026:10:26:56 +0200] "GET /parameters.yml HTTP/1.1" 403 524 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" "gitlab.melroy.org" 0.002 gate=not_checked
34.79.202.206 - - [18/Oct/2026:10:26:56 +0200] "GET /wp-content/debug.log HTTP/1.1" 403 524 "" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" "gitlab.melroy.org" 0.002 gate=not_checked
34.79.202.206 - - [18/Oct/2026:10:26:56 +0200] "GET /.git/config HTTP/1.1" 403 524 "" "Mozilla
...
show less
Web App Attack
🇪🇸
librebit
2026-10-18 08:21:19
(24 minutes ago)
Brute force
Brute-Force
🇩🇪
macrob
2026-10-18 08:17:27
(28 minutes ago)
2026/10/18 08:17:26 [error] 1568416#1568416: *10648724 access forbidden by rule, client: 34.79.202.2 ...
show more
2026/10/18 08:17:26 [error] 1568416#1568416: *10648724 access forbidden by rule, client: 34.79.202.206, server: fastcredit.net.ua, request: "GET /.env.backup HTTP/2.0", host: "fastcredit.net.ua"
2026/10/18 08:17:26 [error] 1568414#1568414: *10649029 access forbidden by rule, client: 34.79.202.206, server: fastcredit.net.ua, request: "GET /.env.save HTTP/2.0", host: "fastcredit.net.ua"
2026/10/18 08:17:26 [error] 1568418#1568418: *10645520 access forbidden by rule, client: 34.79.202.206, server: fastcredit.net.ua, request: "GET /.env.bak HTTP/2.0", host: "fastcredit.net.ua"
...
show less
Web App Attack
🇫🇷
ingroscart.it
2026-10-18 06:44:57
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇫🇷
Phenix Info
2026-10-18 06:44:36
(2 hours ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇪🇸
robotstxt
2026-10-18 06:35:08
(2 hours ago)
2026/10/18 06:35:03 [error] 935#935: *628226 [client 34.79.202.206] ModSecurity: Access denied with ...
show more
2026/10/18 06:35:03 [error] 935#935: *628226 [client 34.79.202.206] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `10' ) [file "/var/lib/angie/modsecurity/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.nascapers.es"] [uri "/debug.log"] [unique_id "179230530353.180757"] [ref ""], client: "34.79.202.206", server: "www.nascapers.es", request_line: "GET /debug.log HTTP/1.1", host: "www.nascapers.es"
2026/10/18 06:35:03 [error] 935#935: *628230 [client 34.79.202.206] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/var/lib/angi
...
show less
Web App Attack
🇧🇪
voormedia
2026-10-18 06:12:34
(2 hours ago)
Accessed trap at '/.git/config'
Web App Attack
🇩🇪
macrob
2026-10-18 06:08:28
(2 hours ago)
2026/10/18 06:08:27 [error] 1425581#1425581: *10269249 access forbidden by rule, client: 34.79.202.2 ...
show more
2026/10/18 06:08:27 [error] 1425581#1425581: *10269249 access forbidden by rule, client: 34.79.202.206, server: binixo.com.ua, request: "GET /.env HTTP/1.1", host: "binixo.com.ua"
2026/10/18 06:08:27 [error] 1425582#1425582: *10269251 access forbidden by rule, client: 34.79.202.206, server: binixo.com.ua, request: "GET /.env.local HTTP/1.1", host: "binixo.com.ua"
2026/10/18 06:08:27 [error] 1425582#1425582: *10269250 access forbidden by rule, client: 34.79.202.206, server: binixo.com.ua, request: "GET /.env.production HTTP/1.1", host: "binixo.com.ua"
...
show less
Web App Attack
🇮🇹
CoreTech srl
2026-10-18 05:40:26
(3 hours ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇮🇩
penjaga BRIN
2026-10-18 05:34:47
(3 hours ago)
Suspicious malicious activity
Hacking
🇮🇪
Coolnagour
2026-10-18 05:34:10
(3 hours ago)
http-probing: /@fs/urandom
Web App Attack
🇩🇪
JLKnoch Software GmbH
2026-10-18 05:02:21
(3 hours ago)
CrowdSec crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇬🇧
sc user
2026-10-17 23:46:20
(8 hours ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
🇫🇷
SpaceHost-Server
2026-10-17 22:23:30
(10 hours ago)
Brute-Force
Web App Attack
