🇮🇳
evicky2002
2026-07-21 06:00:00
(4 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
Savvii
2026-07-21 02:27:53
(4 days ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
2026-07-21 02:03:03
(4 days ago)
Bot / scanning and/or hacking attempts: [69/69] read: stream 0, , [38/27] read: stream 0, , GET /w ...
show more
Bot / scanning and/or hacking attempts: [69/69] read: stream 0, , [38/27] read: stream 0, , GET /wp-config.php.bak HTTP/2.0, [77/77] read: stream 0, , [73/73] read: stream 0,
show less
Hacking
Web App Attack
🇬🇧
Apache
2026-07-21 01:57:01
(4 days ago)
(mod_security) mod_security (id:930130) triggered by 34.88.94.79 (FI/Finland/79.94.88.34.bc.googleus ...
show more
(mod_security) mod_security (id:930130) triggered by 34.88.94.79 (FI/Finland/79.94.88.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-07-21 01:49:17
(4 days ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-21 01:45:21
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.94.79 (79.94.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.94.79 (79.94.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 21:45:15.342881 2026] [security2:error] [pid 2288245:tid 2288245] [client 34.88.94.79:34796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "animatuevento.com.mx"] [uri "/.env.example"] [unique_id "al7PKz1aDTJhsDIM15JFewAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-07-21 01:25:08
(4 days ago)
Web App Attack
🇩🇪
macrob
2026-07-21 01:17:08
(4 days ago)
2026/07/21 01:17:06 [error] 2087328#2087328: *394409480 access forbidden by rule, client: 34.88.94.7 ...
show more
2026/07/21 01:17:06 [error] 2087328#2087328: *394409480 access forbidden by rule, client: 34.88.94.79, server: binixo.es, request: "GET /.env.bak HTTP/2.0", host: "binixo.es"
2026/07/21 01:17:06 [error] 2087332#2087332: *394389809 access forbidden by rule, client: 34.88.94.79, server: binixo.es, request: "GET /admin/.env HTTP/2.0", host: "binixo.es"
2026/07/21 01:17:06 [error] 2087328#2087328: *394420367 access forbidden by rule, client: 34.88.94.79, server: binixo.es, request: "GET /.git/config HTTP/2.0", host: "binixo.es"
...
show less
Web App Attack
2026-07-21 01:14:31
(4 days ago)
scanning for potential vulnerable apps (wordpress etc.) and database accesses (GHR). Requested URI: ...
show more
scanning for potential vulnerable apps (wordpress etc.) and database accesses (GHR). Requested URI: /.git/config
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 01:03:44
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.94.79 (79.94.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.94.79 (79.94.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 21:03:39.526478 2026] [security2:error] [pid 2287:tid 2287] [client 34.88.94.79:40388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idahostem.org"] [uri "/.htpasswd"] [unique_id "al7Fa0tVEq7nOsPWOQHY6wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
venus.launch.bz
2026-07-21 01:00:25
(4 days ago)
(gohttpua) Bad UA Go-http-client from 34.88.94.79 (FI/Finland/79.94.88.34.bc.googleusercontent.com)
Hacking
🇺🇸
Mundo Bueno
2026-07-21 00:39:55
(4 days ago)
[ISILIA Protection v2.1] Tentative d'accès: /_ignition/health-check | Pays: FI | UA: Mozilla/5.0 (co ...
show more
[ISILIA Protection v2.1] Tentative d'accès: /_ignition/health-check | Pays: FI | UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
show less
Hacking
Web App Attack
🇳🇿
Antinson
2026-07-21 00:27:08
(4 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
Savvii
2026-07-21 00:07:21
(4 days ago)
20 attempts against mh-misbehave-ban on moon
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-07-20 23:47:39
(5 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack