๐ธ๐ฆ
BenTahily
2026-10-13 07:00:14
(1 day ago)
Malicious activity against marketblitzer.com (BLITZER Trading Platform)
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-10-11 22:19:28
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐ธ๐ฆ
BenTahily
2026-10-11 07:00:19
(3 days ago)
Malicious activity against marketblitzer.com (BLITZER Trading Platform)
Web App Attack
Hacking
๐ฌ๐ง
openstrike.co.uk
2026-10-11 05:14:20
(3 days ago)
362 attacks on PHP URLs, VC URLs, env grabbing URLs (type 2), env grabbing URLs, directory traversal ...
show more
362 attacks on PHP URLs, VC URLs, env grabbing URLs (type 2), env grabbing URLs, directory traversals, config grabbing URLs (type 2), password/key grabbing URLs:
GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1
GET /core/.env HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /secrets.json HTTP/1.1
GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1
show less
Web App Attack
Hacking
๐ณ๐ฑ
Savvii
2026-10-11 04:43:50
(3 days ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-11 04:34:48
(3 days ago)
[ti-17al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.83.227.39 - - [11/Oct/2026:06:34:45 +0200] "GET /%2e%2e/.env HTTP/2.0" 403 571 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.83.227.39 - - [11/Oct/2026:06:34:45 +0200] "GET /build../.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.83.227.39 - - [11/Oct/2026:06:34:45 +0200] "GET /static../.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.83.227.39 - - [11/Oct/2026:06:34:45 +0200] "GET /files../.env HTTP/2.0" 403 542 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 04:23:29
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.83.227.39 (39.227.83.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.83.227.39 (39.227.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 00:23:23.286924 2026] [security2:error] [pid 7619:tid 7619] [client 34.83.227.39:49892] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||wisdomsco.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wisdomsco.com"] [uri "/z9x8c7v6b5-debug-trigger-wisdomsco.com"] [unique_id "assPO9Xwld7oTcn9ZwbHLQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
etu brutus
2026-10-11 04:08:01
(3 days ago)
34.83.227.39 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 03:40:17
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.83.227.39 (39.227.83.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.83.227.39 (39.227.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:40:13.410302 2026] [security2:error] [pid 14941:tid 14941] [client 34.83.227.39:34418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secure-rep.com"] [uri "/img../.env"] [unique_id "assFHfNw6ERyxx4m6zF_pwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
rh24
2026-10-11 03:23:19
(3 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.83.227.39 (US/Uni ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.83.227.39 (US/United States/39.227.83.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐ฒ๐พ
Rizzy
2026-10-11 03:18:22
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 02:44:44
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.83.227.39 (39.227.83.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.83.227.39 (39.227.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 22:44:37.573775 2026] [security2:error] [pid 19164:tid 19164] [client 34.83.227.39:39420] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||my-spec.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "my-spec.com"] [uri "/z9x8c7v6b5-debug-trigger-my-spec.com"] [unique_id "asr4FWth8J0ugDieLSzxUwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Tamsy
2026-10-11 02:39:54
(3 days ago)
HTTPD - Buffer overflow attack
Web App Attack
Anonymous
2026-10-11 02:04:30
(3 days ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
MaxSmartCode
2026-10-11 02:04:24
(3 days ago)
Credential brute-force attacks on webpage.
Brute-Force
SSH