🇩🇪
webanyone
2026-09-11 21:02:37
(30 minutes ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇭🇺
kranem
2026-09-11 21:00:05
(32 minutes ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 14618 (Amazon.com, Inc.)
Protocol: HTTP/1 ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 14618 (Amazon.com, Inc.)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-09-11T19:54:36Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0
show less
Bad Web Bot
🇫🇷
dynamix
2026-09-11 20:50:32
(42 minutes ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-11 20:40:59
(51 minutes ago)
Bot detected scanning for vulnerable pages
Port Scan
🇩🇪
itsolon
2026-09-11 20:38:33
(54 minutes ago)
[11/Sep/2026:22:38:32 +0200] 178915911288.062863 54.242.49.203 52286 217.154.7.177 443
[11/Sep/2026: ...
show more
[11/Sep/2026:22:38:32 +0200] 178915911288.062863 54.242.49.203 52286 217.154.7.177 443
[11/Sep/2026:22:38:32 +0200] 178915911245.205126 54.242.49.203 52286 217.154.7.177 443
[11/Sep/2026:22:38:32 +0200] 178915911279.655473 54.242.49.203 52286 217.154.7.177 443
[11/Sep/2026:22:38:32 +0200] 178915911276.540471 54.242.49.203 52286 217.154.7.177 443
[11/Sep/2026:22:38:32 +0200] 178915911265.277446 54.242.49.203 52286 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇵🇱
itsvic.dev
2026-09-11 20:18:57
(1 hour ago)
54.242.49.203 - - [11/Sep/2026:20:18:56 +0000] "wings.itsvic.dev" "GET /.env.local HTTP/2.0" 404 14 ...
show more
54.242.49.203 - - [11/Sep/2026:20:18:56 +0000] "wings.itsvic.dev" "GET /.env.local HTTP/2.0" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
54.242.49.203 - - [11/Sep/2026:20:18:56 +0000] "wings.itsvic.dev" "GET /.env HTTP/2.0" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
54.242.49.203 - - [11/Sep/2026:20:18:56 +0000] "wings.itsvic.dev" "GET /.env.dev HTTP/2.0" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Brute-Force
Web App Attack
🇩🇪
lolyay
2026-09-11 19:44:57
(1 hour ago)
54.242.49.203 - - [11/Sep/2026:19:44:56 +0000] "GET /.env.old HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Wind ...
show more
54.242.49.203 - - [11/Sep/2026:19:44:56 +0000] "GET /.env.old HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
54.242.49.203 - - [11/Sep/2026:19:44:56 +0000] "GET /.env.backup HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
Bad Web Bot
🇩🇪
paissangroup
2026-09-11 19:04:30
(2 hours ago)
Multiple WAF Violations
Web App Attack
🇳🇱
svr
2026-09-11 18:58:23
(2 hours ago)
Abusive Automated Web Scanner
Web App Attack
🇺🇸
Lee Daniel
2026-09-11 18:45:44
(2 hours ago)
54.242.49.203 - - [11/Sep/2026:14:45:44 -0400] "GET /web.config HTTP/1.1" 403 6292 "-" "Mozilla/5.0 ...
show more
54.242.49.203 - - [11/Sep/2026:14:45:44 -0400] "GET /web.config HTTP/1.1" 403 6292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
daveoctober
2026-09-11 18:30:50
(3 hours ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-09-11 18:03:34
(3 hours ago)
54.242.49.203 - - [11/Sep/2026:21:03:31 +0300] "GET /web.config.txt HTTP/2.0" 404 7841 "-" "Mozilla/ ...
show more
54.242.49.203 - - [11/Sep/2026:21:03:31 +0300] "GET /web.config.txt HTTP/2.0" 404 7841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
54.242.49.203 - - [11/Sep/2026:21:03:34 +0300] "GET /web.config.txt HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
🇳🇱
Savvii
2026-09-11 17:58:04
(3 hours ago)
20 attempts against mh-misbehave-ban on chive
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
pixiekat
2026-09-11 17:36:27
(3 hours ago)
[Fri Sep 11 18:36:27.226776 2026] [authz_core:error] [pid 3689055:tid 3689098] [remote 54.242.49.203 ...
show more
[Fri Sep 11 18:36:27.226776 2026] [authz_core:error] [pid 3689055:tid 3689098] [remote 54.242.49.203:47572] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/katy.devilishseraph.net/web/.env.backup
[Fri Sep 11 18:36:27.229376 2026] [authz_core:error] [pid 3689055:tid 3689101] [remote 54.242.49.203:47572] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/katy.devilishseraph.net/web/.env.bak
[Fri Sep 11 18:36:27.230740 2026] [authz_core:error] [pid 3689055:tid 3689077] [remote 54.242.49.203:47572] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/katy.devilishseraph.net/web/.env.live
[Fri Sep 11 18:36:27.232491 2026] [authz_core:error] [pid 3689055:tid 3689099] [remote 54.242.49.203:47572] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/katy.devilishseraph.net/web/.env.test
[Fri Sep 11 18:36:27.233423 2026] [authz_core:error] [pid 3689055:tid 3689074] [remote 54.242.4
...
show less
Brute-Force
🇺🇦
URAN Publishing Service
2026-09-11 17:34:38
(3 hours ago)
[11/Sep/2026:20:34:38 +0300] -- 54.242.49.203 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env ...
show more
[11/Sep/2026:20:34:38 +0300] -- 54.242.49.203 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.production HTTP/1.1
show less
Bad Web Bot
Web App Attack