Anonymous
2026-09-22 16:34:28
(1 month ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
π©πͺ
IVski.com
2026-09-19 17:43:39
(1 month ago)
IVski WAF | Webshell probe detected - requesting common script extensions
Hacking
Brute-Force
Web App Attack
πͺπΈ
robotstxt
2026-09-19 16:03:08
(1 month ago)
34.138.208.68 - - [19/Sep/2026:16:03:07 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2 ...
show more
34.138.208.68 - - [19/Sep/2026:16:03:07 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-"
34.138.208.68 - - [19/Sep/2026:16:03:07 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-"
34.138.208.68 - - [19/Sep/2026:16:03:07 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-"
34.138.208.68 - - [19/Sep/2026:16:03:07 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-"
34.138.208.68 - - [19/Sep/2026:16:03:07 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-"
...
show less
Web Spam
Web App Attack
πͺπΈ
robotstxt
2026-09-19 12:02:48
(1 month ago)
34.138.208.68 - - [19/Sep/2026:12:02:22 +0000] "-" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.2 ...
show more
34.138.208.68 - - [19/Sep/2026:12:02:22 +0000] "-" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [19/Sep/2026:12:02:22 +0000] "-" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [19/Sep/2026:12:02:22 +0000] "-" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [19/Sep/2026:12:02:22 +0000] "-" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [19/Sep/2026:12:02:22 +0000] "-" 400 193 "-" "-" "-" edge="34.138.208.68"
...
show less
Web Spam
Web App Attack
πͺπΈ
robotstxt
2026-09-19 09:01:00
(1 month ago)
34.138.208.68 - - [19/Sep/2026:09:00:58 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="3 ...
show more
34.138.208.68 - - [19/Sep/2026:09:00:58 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [19/Sep/2026:09:00:58 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
...
show less
Web Spam
Web App Attack
πͺπΈ
robotstxt
2026-09-19 07:03:03
(1 month ago)
34.138.208.68 - - [19/Sep/2026:07:02:13 +0000] "GET /.env.live HTTP/2.0" 403 10130 "-" rt="0.108" "M ...
show more
34.138.208.68 - - [19/Sep/2026:07:02:13 +0000] "GET /.env.live HTTP/2.0" 403 10130 "-" rt="0.108" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)" "-" h="docs.robotstxt.es" sn="docs.robotstxt.es" ru="/.env.live" u="/index.php" ucs="-" ua="unix:/var/run/php/docs82.sock" us="404" uct="0.000" urt="0.108"
34.138.208.68 - - [19/Sep/2026:07:02:13 +0000] "GET /core/.env HTTP/2.0" 403 10130 "-" rt="0.161" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" "-" h="docs.robotstxt.es" sn="docs.robotstxt.es" ru="/core/.env" u="/index.php" ucs="-" ua="unix:/var/run/php/docs82.sock" us="404" uct="0.000" urt="0.160"
34.138.208.68 - - [19/Sep/2026:07:02:13 +0000] "GET /services/.env HTTP/2.0" 403 10130 "-" rt="0.134" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" "-" h="docs.robotstxt.es" sn="docs.robotstxt.es" ru="/services/.env" u="/
...
show less
Web App Attack
π³π±
javierin
2026-09-19 06:00:01
(1 month ago)
34.138.208.68 - devops.mamaexperta.es - - [19/Sep/2026:06:00:00 +0000] "GET / HTTP/2.0" 200 0 "-" "M ...
show more
34.138.208.68 - devops.mamaexperta.es - - [19/Sep/2026:06:00:00 +0000] "GET / HTTP/2.0" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.138.208.68 - devops.mamaexperta.es - - [19/Sep/2026:06:00:00 +0000] "GET /.idea/WebServers.xml HTTP/2.0" 200 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Web App Attack
Hacking
πͺπΈ
masterguru
2026-09-19 01:09:41
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
π¬π§
andypiper
2026-09-19 01:01:44
(1 month ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
πͺπΈ
robotstxt
2026-09-19 00:18:51
(1 month ago)
34.138.208.68 - - [19/Sep/2026:00:18:49 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="3 ...
show more
34.138.208.68 - - [19/Sep/2026:00:18:49 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [19/Sep/2026:00:18:49 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [19/Sep/2026:00:18:49 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
...
show less
Web Spam
Web App Attack
π³π±
Savvii
2026-09-19 00:13:46
(1 month ago)
20 attempts against mh-misbehave-ban on mars
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-18 19:57:23
(1 month ago)
Fail2Ban Log Report 2026/09/18 21:57:20 [error] 3597#3597: *3470897 access forbidden by rule, client ...
show more
Fail2Ban Log Report 2026/09/18 21:57:20 [error] 3597#3597: *3470897 access forbidden by rule, client: 34.138.208.68, server: cdn.cvazquez.es, request: "GET /config/application.properties HTTP/2.0", host: "cdn.cvazquez.es"
2026/09/18 21:57:20 [error] 3597#3597: *3470902 access forbidden by rule, client: 34.138.208.68, server: cdn.cvazquez.es, request: "GET /push_config.json HTTP/2.0", host: "cdn.cvazquez.es"
2026/09/18 21:57:21 [error] 3597#3597: *3470907 access forbidden by rule, client: 34.138.208.68, server: cdn.cvazquez.es, request: "GET /config.toml HTTP/2.0", host: "cdn.cvazquez.es"
...
show less
Hacking
Brute-Force
Web App Attack
πͺπΈ
robotstxt
2026-09-18 15:28:56
(1 month ago)
34.138.208.68 - - [18/Sep/2026:15:28:53 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge= ...
show more
34.138.208.68 - - [18/Sep/2026:15:28:53 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [18/Sep/2026:15:28:53 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [18/Sep/2026:15:28:53 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [18/Sep/2026:15:28:53 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [18/Sep/2026:15:28:54 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
...
show less
Web Spam
Web App Attack
πͺπΈ
robotstxt
2026-09-18 11:48:47
(1 month ago)
34.138.208.68 - - [18/Sep/2026:11:48:44 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="3 ...
show more
34.138.208.68 - - [18/Sep/2026:11:48:44 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [18/Sep/2026:11:48:44 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [18/Sep/2026:11:48:44 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [18/Sep/2026:11:48:44 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
34.138.208.68 - - [18/Sep/2026:11:48:44 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.138.208.68"
...
show less
Web Spam
Web App Attack
π³π±
MyGlobalFlowers
2026-09-18 09:02:18
(1 month ago)
Multiple WAF Violations
Web App Attack