Anonymous
2026-08-20 16:31:56
UTC ·
(2 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Anonymous
2026-08-20 12:09:11
UTC ·
(2 months ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇺🇸
helios.live
2026-08-20 10:47:32
UTC ·
(2 months ago)
2026/08/20 10:47:32 [error] 1401613#1401613: *449793 access forbidden by rule, client: 35.229.27.190, server: kocerroxy.com, request: "GET /.aws/credentials HTTP/1.1", host: "kocerroxy.com"
2026/08/20 10:47:32 [error] 1401614#1401614: *449795 access ...
show more
2026/08/20 10:47:32 [error] 1401613#1401613: *449793 access forbidden by rule, client: 35.229.27.190, server: kocerroxy.com, request: "GET /.aws/credentials HTTP/1.1", host: "kocerroxy.com"
2026/08/20 10:47:32 [error] 1401614#1401614: *449795 access forbidden by rule, client: 35.229.27.190, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/08/20 10:47:32 [error] 1401614#1401614: *449795 access forbidden by rule, client: 35.229.27.190, server: kocerroxy.com, request: "GET /.aws/config HTTP/1.1", host: "kocerroxy.com"
2026/08/20 10:47:32 [error] 1401615#1401615: *449797 access forbidden by rule, client: 35.229.27.190, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/08/20 10:47:32 [error] 1401614#1401614: *449795 access forbidden by rule, client: 35.229.27.190, server: kocerroxy.com, request: "GET /.gitconfig HTTP/1.1", host: "kocerroxy.com"
...
show less
Web App Attack
🇨🇿
ptlab
2026-08-20 10:45:37
UTC ·
(2 months ago)
Detected env_leak attack from WP-host.
Hacking
Web App Attack
🇩🇪
macrob
2026-08-20 10:40:24
UTC ·
(2 months ago)
2026/08/20 10:40:22 [error] 1064130#1064130: *500283687 access forbidden by rule, client: 35.229.27.190, server: fastcredit.net.ua, request: "GET /.vite/manifest.json HTTP/2.0", host: "fastcredit.net.ua"
2026/08/20 10:40:22 [error] 1064133#1064133: * ...
show more
2026/08/20 10:40:22 [error] 1064130#1064130: *500283687 access forbidden by rule, client: 35.229.27.190, server: fastcredit.net.ua, request: "GET /.vite/manifest.json HTTP/2.0", host: "fastcredit.net.ua"
2026/08/20 10:40:22 [error] 1064133#1064133: *500284128 access forbidden by rule, client: 35.229.27.190, server: fastcredit.net.ua, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "fastcredit.net.ua"
2026/08/20 10:40:22 [error] 1064129#1064129: *500258273 access forbidden by rule, client: 35.229.27.190, server: fastcredit.net.ua, request: "GET /.aws/credentials HTTP/2.0", host: "fastcredit.net.ua"
...
show less
Web App Attack
🇺🇸
oralunal
2026-08-20 10:28:34
UTC ·
(2 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-20 09:36:21
UTC ·
(2 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
Anonymous
2026-08-20 09:14:35
UTC ·
(2 months ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-config.php.bak
Web App Attack
🇬🇧
D3monite
2026-08-20 08:54:15
UTC ·
(2 months ago)
Attempted (Hacking) Attack
Hacking
🇧🇪
voormedia
2026-08-20 08:49:34
UTC ·
(2 months ago)
Accessed trap at '/.git/config'
Web App Attack
🇩🇪
macrob
2026-08-20 08:37:49
UTC ·
(2 months ago)
2026/08/20 08:37:47 [error] 1064129#1064129: *499928577 access forbidden by rule, client: 35.229.27.190, server: finami.es, request: "GET /.aws/credentials HTTP/2.0", host: "finami.es"
2026/08/20 08:37:47 [error] 1064132#1064132: *499933127 access fo ...
show more
2026/08/20 08:37:47 [error] 1064129#1064129: *499928577 access forbidden by rule, client: 35.229.27.190, server: finami.es, request: "GET /.aws/credentials HTTP/2.0", host: "finami.es"
2026/08/20 08:37:47 [error] 1064132#1064132: *499933127 access forbidden by rule, client: 35.229.27.190, server: finami.es, request: "GET /.aws/config HTTP/2.0", host: "finami.es"
2026/08/20 08:37:47 [error] 1064128#1064128: *499933276 access forbidden by rule, client: 35.229.27.190, server: finami.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "finami.es"
...
show less
Web App Attack
🇫🇮
YF
2026-08-20 08:30:46
UTC ·
(2 months ago)
404 errors Vulnerability scan
Web App Attack
🇳🇱
MacLotsen
2026-08-20 08:28:42
UTC ·
(2 months ago)
[Thu Aug 20 10:28:40.665319 2026] [php7:error] [pid 912421] [client 35.229.27.190:49222] script '/var/www/degastrobar.nl/info.php' not found or unable to stat
[Thu Aug 20 10:28:40.688945 2026] [php7:error] [pid 912891] [client 35.229.27.190:49234] sc ...
show more
[Thu Aug 20 10:28:40.665319 2026] [php7:error] [pid 912421] [client 35.229.27.190:49222] script '/var/www/degastrobar.nl/info.php' not found or unable to stat
[Thu Aug 20 10:28:40.688945 2026] [php7:error] [pid 912891] [client 35.229.27.190:49234] script '/var/www/degastrobar.nl/phpinfo.php' not found or unable to stat
[Thu Aug 20 10:28:40.883736 2026] [php7:error] [pid 912466] [client 35.229.27.190:49248] script '/var/www/degastrobar.nl/pi.php' not found or unable to stat
...
show less
Web App Attack
Brute-Force
Anonymous
2026-08-20 07:31:47
UTC ·
(2 months ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-08-20 06:55:58
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 35.229.27.190 (190.27.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 02:55:53.882983 2026] [security2:error] [pid 13525:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.229.27.190 (190.27.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 02:55:53.882983 2026] [security2:error] [pid 13525:tid 13525] [client 35.229.27.190:59316] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.manty.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.manty.com"] [uri "/rclone.conf"] [unique_id "aoak-fmzz36CWz6BrEi5EAAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack