🇫🇷
SpaceHost-Server
2026-11-07 23:18:35
UTC ·
(4 days ago)
Brute-Force
Web App Attack
🇺🇸
Secure Gateway®️
2026-11-06 22:00:35
UTC ·
(5 days ago)
Report By Secure Gateway Security Team: Unsolicited Connection Attempt
SQL Injection
🇺🇸
ALSCO®️
2026-11-06 22:00:35
UTC ·
(5 days ago)
Report By ALSCO Security Team: Unauthorized Connection Attempt
Hacking
🇩🇪
macrob
2026-11-06 04:53:21
UTC ·
(6 days ago)
2026/11/06 04:53:19 [error] 2789057#2789057: *7406081 access forbidden by rule, client: 35.185.165.30, server: binixo.ro, request: "GET /.vite/manifest.json HTTP/2.0", host: "binixo.ro"
2026/11/06 04:53:19 [error] 2789057#2789057: *7406086 access for ...
show more
2026/11/06 04:53:19 [error] 2789057#2789057: *7406081 access forbidden by rule, client: 35.185.165.30, server: binixo.ro, request: "GET /.vite/manifest.json HTTP/2.0", host: "binixo.ro"
2026/11/06 04:53:19 [error] 2789057#2789057: *7406086 access forbidden by rule, client: 35.185.165.30, server: binixo.ro, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "binixo.ro"
2026/11/06 04:53:20 [error] 2789057#2789057: *7406081 access forbidden by rule, client: 35.185.165.30, server: binixo.ro, request: "GET /admin%2F.env HTTP/2.0", host: "binixo.ro"
...
show less
Web App Attack
🇿🇦
Megasurf
2026-11-06 04:30:22
UTC ·
(6 days ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇧🇪
cmbplf
2026-11-06 04:20:15
UTC ·
(6 days ago)
6.906 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 04:16:21
UTC ·
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 35.185.165.30 (30.165.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:16:15.284867 2026] [security2:error] [pid 30263:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.185.165.30 (30.165.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:16:15.284867 2026] [security2:error] [pid 30263:tid 30263] [client 35.185.165.30:42764] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.thebrotherhoodlounge.com|F|2"] [data ".thebrotherhoodlounge.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.thebrotherhoodlounge.com"] [uri "/z9x8c7v6b5-debug-trigger-www.thebrotherhoodlounge.com"] [unique_id "au1Ujz9PVeEv9TBIR8BawgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ams_sec_user
2026-11-06 04:05:20
UTC ·
(6 days ago)
Automated requests against a hosted website: 436 requests between 03:00 and 03:59 UTC; 213 probes for exposed secrets/config files (/userfiles, /userfiles/x, /wp-admin/.env). Reported automatically.
Hacking
Bad Web Bot
Web App Attack
🇦🇺
welife
2026-11-06 03:58:39
UTC ·
(6 days ago)
Attempting path traversal against a web application, detected by our honeypot.
Sample requests, with our own hostnames removed:
GET /telescope/requests "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email removed])" ...
show more
Attempting path traversal against a web application, detected by our honeypot.
Sample requests, with our own hostnames removed:
GET /telescope/requests "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email removed])"
GET /userfiles?path=../../../../.env "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email removed])"
GET /wp-config.php.bak "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
show less
Web App Attack
🇳🇱
Savvii
2026-11-06 02:10:17
UTC ·
(6 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 01:47:13
UTC ·
(6 days ago)
Unauthorized server file access attempt.
Hacking
🇩🇪
FeG Deutschland
2026-11-06 01:32:56
UTC ·
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
2026-11-06 00:19:13
UTC ·
(6 days ago)
Bot / seems abusive / Apache connections: 20
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 23:59:16
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.165.30 (30.165.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:59:12.990325 2026] [security2:error] [pid 19625:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.165.30 (30.165.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:59:12.990325 2026] [security2:error] [pid 19625:tid 19625] [client 35.185.165.30:37850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.flanaganspubandgrill.com"] [uri "/dev/.env"] [unique_id "au0YUHOdZh70d7OZ6WsZHQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-05 23:20:31
UTC ·
(6 days ago)
Brute-Force
Web App Attack
