🇮🇱
spd.co.il
2026-09-18 22:02:23
(18 hours ago)
Web application attack detected
Hacking
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-17 22:24:02
(1 day ago)
Brute-Force
Web App Attack
2026-09-17 22:15:37
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Clou ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Cloud secrets probing, Directory traversal
show less
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-09-17 06:00:05
(2 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇵🇱
nakordoni.eu
2026-09-17 03:00:05
(2 days ago)
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ...
show more
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Amazon Technologies Inc. (US), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100.
show less
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-09-17 02:56:07
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (POS ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (POST) | Endpoint: /icecoder/lib/terminal-xhr.php | UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
MyGlobalFlowers
2026-09-17 02:26:37
(2 days ago)
Multiple WAF Violations
Web App Attack
2026-09-17 02:25:53
(2 days ago)
Portscan: TCP/8080 (3x), TCP/8443 (4x)
Port Scan
2026-09-17 01:34:04
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Savvii
2026-09-17 01:25:26
(2 days ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
2026-09-17 01:05:02
(2 days ago)
"GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1"
Hacking
Web App Attack
🇫🇷
Cuteminded
2026-09-17 01:01:12
(2 days ago)
Highly suspect IP
Web Spam
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-17 00:39:23
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 52.90.63.43 (ec2-52-90-63-43.compute-1.amazonaw ...
show more
(mod_security) mod_security (id:210730) triggered by 52.90.63.43 (ec2-52-90-63-43.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:39:18.846071 2026] [security2:error] [pid 22782:tid 22782] [client 52.90.63.43:35314] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||learningbyshipping.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "learningbyshipping.com"] [uri "/z9x8c7v6b5-debug-trigger-learningbyshipping.com"] [unique_id "aqs2tmosf_GVR_yoTvtI6QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-09-17 00:34:24
(2 days ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
🇺🇸
helios.live
2026-09-17 00:09:20
(2 days ago)
2026/09/17 00:09:18 [error] 1092066#1092066: *3447210 access forbidden by rule, client: 52.90.63.43, ...
show more
2026/09/17 00:09:18 [error] 1092066#1092066: *3447210 access forbidden by rule, client: 52.90.63.43, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/17 00:09:18 [error] 1092066#1092066: *3447083 access forbidden by rule, client: 52.90.63.43, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/17 00:09:19 [error] 1092066#1092066: *3447087 access forbidden by rule, client: 52.90.63.43, server: kocerroxy.com, request: "GET /.env.stage HTTP/1.1", host: "kocerroxy.com"
2026/09/17 00:09:19 [error] 1092066#1092066: *3447087 access forbidden by rule, client: 52.90.63.43, server: kocerroxy.com, request: "GET /.env.save HTTP/1.1", host: "kocerroxy.com"
2026/09/17 00:09:19 [error] 1092066#1092066: *3447087 access forbidden by rule, client: 52.90.63.43, server: kocerroxy.com, request: "GET /.env.www HTTP/1.1", host: "kocerroxy.com"
...
show less
Web App Attack