2026-09-17 20:57:39
(1 hour ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
raph
2026-09-17 20:27:29
(1 hour ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇫🇮
albionfreemarket.com
2026-09-17 19:09:11
(2 hours ago)
34.80.9.150 - - [17/Sep/2026:19:09:10 +0000] "POST /graphql HTTP/2.0" 403 171 "https://cdn.albionfre ...
show more
34.80.9.150 - - [17/Sep/2026:19:09:10 +0000] "POST /graphql HTTP/2.0" 403 171 "https://cdn.albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 0.000 "-" "TW"
...
show less
Bad Web Bot
Web App Attack
2026-09-17 14:49:31
(7 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇨🇷
Klicks
2026-09-17 13:45:00
(8 hours ago)
Request URL: https://api.1.com:443/trace.axd
Request path: /trace.axd
User host addr ...
show more
Request URL: https://api.1.com:443/trace.axd
Request path: /trace.axd
User host address: 34.80.9.150
show less
Bad Web Bot
Web App Attack
Web Spam
🇸🇬
khairilgunawan
2026-09-17 08:53:28
(13 hours ago)
ZonaKuota Sentinel: Malicious automated scanner/exploit probe trapped. Blocked.
Web App Attack
Bad Web Bot
🇳🇱
debestelapp
2026-09-17 08:10:13
(13 hours ago)
Web App Attack
🇳🇱
Savvii
2026-09-17 07:31:42
(14 hours ago)
22 attempts against mh-misbehave-ban on bean
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
GabrielJST
2026-09-17 07:23:31
(14 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.80.9.150 (TW/Taiwan/150.9.80.34.bc.g ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.80.9.150 (TW/Taiwan/150.9.80.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇷🇺
olegio
2026-09-17 07:23:12
(14 hours ago)
34.80.9.150 - - [17/Sep/2026:07:23:11 +0000] "GET /@fs/../.env?raw?? HTTP/2.0" 403 146 "-" "Mozilla/ ...
show more
34.80.9.150 - - [17/Sep/2026:07:23:11 +0000] "GET /@fs/../.env?raw?? HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.80.9.150 - - [17/Sep/2026:07:23:11 +0000] "GET /@fs/app/.env?raw?? HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 07:06:35
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.9.150 (150.9.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.9.150 (150.9.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 03:06:30.139895 2026] [security2:error] [pid 2437:tid 2437] [client 34.80.9.150:37204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thevenicecafe.com"] [uri "/img../.env"] [unique_id "aquRdiS_Jk8gMNFi0h2hGwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
niedson
2026-09-17 06:30:02
(15 hours ago)
Automated scanning for exposed secrets: repeated requests for multiple distinct credential paths (.e ...
show more
Automated scanning for exposed secrets: repeated requests for multiple distinct credential paths (.env variants, .git metadata, .ssh private keys, .aws/credentials). Unsolicited. Reported automatically.
show less
Web App Attack
🇮🇳
evicky2002
2026-09-17 06:00:05
(16 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-09-17 05:22:47
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.9.150 (150.9.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.9.150 (150.9.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:22:39.169336 2026] [security2:error] [pid 26791:tid 26791] [client 34.80.9.150:38700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scadco.com"] [uri "/@fs/var/task/.env"] [unique_id "aqt5H0S8FjvV6Z6DU3JeBQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-09-17 05:03:26
(17 hours ago)
Web App Attack
Web App Attack