2026-09-16 23:50:06
(17 minutes ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇳🇱
Savvii
2026-09-16 23:31:34
(36 minutes ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-16 23:23:43
(44 minutes ago)
Try to access /data/.env
Web App Attack
🇩🇪
LRob
2026-09-16 22:23:47
(1 hour ago)
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537. ...
show more
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) (+1 more) | path: /docker-compose.yml (+3 more) | 2026-09-16 22:23 UTC
show less
Bad Web Bot
🇫🇷
SpaceHost-Server
2026-09-16 22:21:24
(1 hour ago)
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-09-16 22:16:21
(1 hour ago)
35.222.222.9 - - [16/Sep/2026:22:15:42 +0000] "GET /wp-content/plugins/youtube-embed-plus/scripts/fi ...
show more
35.222.222.9 - - [16/Sep/2026:22:15:42 +0000] "GET /wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js HTTP/2.0" 403 33616 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36 EdgA/151.0.0.0" "35.222.222.9" edge="172.70.50.149"
35.222.222.9 - - [16/Sep/2026:22:15:36 +0000] "GET / HTTP/2.0" 403 37559 "https://ccoo.cat" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36 EdgA/151.0.0.0" "35.222.222.9" edge="108.162.241.6"
35.222.222.9 - - [16/Sep/2026:22:15:38 +0000] "GET /shop/.env HTTP/2.0" 403 2 "https://ccoo.cat/shop/.env" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "35.222.222.9" edge="108.162.241.6"
35.222.222.9 - - [16/Sep/2026:22:15:38 +0000] "GET /panel/.env HTTP/2.0" 403 2 "https://ccoo.cat/panel/.env" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "35.222.222
...
show less
Web App Attack
🇺🇸
mnsf
2026-09-16 22:05:43
(2 hours ago)
Abuse Detected (9)
Brute-Force
Web App Attack
2026-09-16 21:53:48
(2 hours ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
2026-09-16 21:36:35
(2 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇮🇹
alessio loto
2026-09-16 21:35:48
(2 hours ago)
WAF Detection: URI_Injection_Detected (Abusive IP). AI Confirmed Attack Payload.
Web App Attack
🇳🇱
Alt255
2026-09-16 21:28:22
(2 hours ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.222.222.9 - - [16/Sep/2026:23:28:21 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 403 369 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-09-16 21:25:08
(2 hours ago)
2026/09/16 21:25:02 [error] 2961659#2961659: *5948590 access forbidden by rule, client: 35.222.222.9 ...
show more
2026/09/16 21:25:02 [error] 2961659#2961659: *5948590 access forbidden by rule, client: 35.222.222.9, server: bin-spin.com, request: "GET /.bash_profile HTTP/1.1", host: "bin-spin.com"
2026/09/16 21:25:02 [error] 2961659#2961659: *5948591 access forbidden by rule, client: 35.222.222.9, server: bin-spin.com, request: "GET /@fs/src/.env?raw?? HTTP/1.1", host: "bin-spin.com"
2026/09/16 21:25:02 [error] 2961659#2961659: *5948594 access forbidden by rule, client: 35.222.222.9, server: bin-spin.com, request: "GET /.profile HTTP/1.1", host: "bin-spin.com"
...
show less
Web App Attack
🇨🇭
backslash
2026-09-16 21:18:02
(2 hours ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
2026-09-16 21:02:40
(3 hours ago)
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, BadPath=23,8, Rate=20, Diversity=20.
show less
Web App Attack
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-16 20:59:43
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 35.222.222.9 (9.222.222.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 35.222.222.9 (9.222.222.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:59:39.079760 2026] [security2:error] [pid 22823:tid 22858] [client 35.222.222.9:54524] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||barstow-station.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "barstow-station.com"] [uri "/z9x8c7v6b5-debug-trigger-barstow-station.com"] [unique_id "aqsDOy8hW-3tYokOF_kACwAAAcU"]
show less
Brute-Force
Bad Web Bot
Web App Attack