π©πͺ
Holger
2026-10-10 03:58:32
(2 days ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
π«π·
SpaceHost-Server
2026-10-09 22:26:30
(2 days ago)
Brute-Force
Web App Attack
π¨π·
Klicks
2026-10-09 13:49:00
(3 days ago)
Request URL: https://api.1.com:443/trace.axd
Request path: /trace.axd
User host ad ...
show more
Request URL: https://api.1.com:443/trace.axd
Request path: /trace.axd
User host address: 8.234.240.251
show less
Bad Web Bot
Web App Attack
Web Spam
π¬π§
blik2108
2026-10-09 02:03:09
(3 days ago)
beta.sleepylizard.com:443 8.234.240.251 - - [09/Oct/2026:03:03:04 +0100] "GET /..%2f.env HTTP/1.1" 4 ...
show more
beta.sleepylizard.com:443 8.234.240.251 - - [09/Oct/2026:03:03:04 +0100] "GET /..%2f.env HTTP/1.1" 404 510 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
beta.sleepylizard.com:443 8.234.240.251 - - [09/Oct/2026:03:03:05 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
beta.sleepylizard.com:443 8.234.240.251 - - [09/Oct/2026:03:03:05 +0100] "GET /..%2f..%2f.env HTTP/1.1" 404 510 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
beta.sleepylizard.com:443 8.234.240.251 - - [09/Oct/2026:03:03:05 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/1.1" 404 510 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
beta.sleepylizard.com:443 8.234.240.251 - - [09/Oct/2026:03:03:05 +0100] "GET /admi
...
show less
Brute-Force
π©πͺ
yvoictra
2026-10-09 01:27:07
(3 days ago)
Bloqueado automΓ‘ticamente por CrowdSec. Escenario: crowdsecurity/http-probing
Web App Attack
π³π±
Savvii
2026-10-09 00:52:23
(3 days ago)
20 attempts against mh-misbehave-ban on burne
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
dot.mg
2026-10-09 00:49:02
(3 days ago)
Bad behaviour
Web Spam
π¦πΉ
RenΓ© Hickersberger
2026-10-09 00:44:51
(3 days ago)
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (compatible; Byt ...
show more
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
show less
Bad Web Bot
π©πͺ
LRob
2026-10-09 00:39:43
(3 days ago)
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claud ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] ), Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot) (+6 more) | path: /lib/terminal-xhr.php, /assets/manifest.json, /ufe6p6tf4e1hnetgu8o1 (+9 more)
show less
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-10-09 00:24:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 8.234.240.251 (251.240.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.240.251 (251.240.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:24:12.203554 2026] [security2:error] [pid 11762:tid 11767] [client 8.234.240.251:55036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oplconnect.com"] [uri "/.htpasswd"] [unique_id "asg0LK6B67YDY1L4LBGolQAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
kbeezie
2026-10-08 23:33:06
(3 days ago)
8.234.240.251 - - [08/Oct/2026:19:33:05 -0400] "GET /server.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 ( ...
show more
8.234.240.251 - - [08/Oct/2026:19:33:05 -0400] "GET /server.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
8.234.240.251 - - [08/Oct/2026:19:33:05 -0400] "GET /key.pem HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
8.234.240.251 - - [08/Oct/2026:19:33:05 -0400] "POST /api/graphql HTTP/1.1" 429 564 "https://kbeezie.com" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
8.234.240.251 - - [08/Oct/2026:19:33:06 -0400] "POST /v1/graphql HTTP/1.1" 429 564 "https://kbeezie.com" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
8.234.240.251 - - [08/Oct/2026:19:33:06 -0400] "GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
show less
Bad Web Bot
Web App Attack
πΊπΈ
helios.live
2026-10-08 23:31:44
(3 days ago)
2026/10/08 23:31:43 [error] 65239#65239: *259829 FastCGI sent in stderr: "Primary script unknown" wh ...
show more
2026/10/08 23:31:43 [error] 65239#65239: *259829 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 8.234.240.251, server: kocerroxy.com, request: "POST /lib/terminal-xhr.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
8.234.240.251 - - [08/Oct/2026:23:31:43 +0000] "POST /lib/terminal-xhr.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
2026/10/08 23:31:43 [error] 65239#65239: *259829 access forbidden by rule, client: 8.234.240.251, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/08 23:31:43 [error] 65240#65240: *260063 access forbidden by rule, client: 8.234.240.251, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/08 23:31:44 [error] 65239#65239: *259829 FastCGI sent i
...
show less
Web App Attack
π©πͺ
itsolon
2026-10-08 23:23:33
(3 days ago)
[09/Oct/2026:01:23:31 +0200] 179150181193.804748 8.234.240.251 55264 217.154.7.177 443
[09/Oct/2026: ...
show more
[09/Oct/2026:01:23:31 +0200] 179150181193.804748 8.234.240.251 55264 217.154.7.177 443
[09/Oct/2026:01:23:32 +0200] 179150181223.818524 8.234.240.251 55264 217.154.7.177 443
[09/Oct/2026:01:23:32 +0200] 179150181274.863293 8.234.240.251 55264 217.154.7.177 443
[09/Oct/2026:01:23:32 +0200] 179150181212.071040 8.234.240.251 55278 217.154.7.177 443
[09/Oct/2026:01:23:32 +0200] 179150181217.534122 8.234.240.251 55278 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-08 23:21:12
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 8.234.240.251 (251.240.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.240.251 (251.240.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:21:06.799986 2026] [security2:error] [pid 24265:tid 24265] [client 8.234.240.251:44358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "instagenii.com"] [uri "/.htpasswd"] [unique_id "asglYmjER4PK3RLCnyDh2gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
ArturShelby
2026-10-08 23:04:34
(3 days ago)
Suspicious path access: /auth/login
Web App Attack