|
๐ฉ๐ช
webanyone
|
|
WAF-refused requests | path: /rclone.conf, /temp/.env, /env/.env (+2 more)
|
Web App Attack
Hacking
|
|
๐ฉ๐ช
klaus_ph
|
|
2026-09-25 18:34:04,930 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.75.118.169
...
|
Bad Web Bot
|
|
๐ฒ๐น
UndergroundExplorer
|
|
Attacks Signature (Known Exploits)
|
Web App Attack
|
|
Anonymous
|
|
[Thu Sep 17 16:12:15.175649 2026] [authz_core:error] [pid 389614:tid 389641] [remote 34.75.118.169:51592] AH01630: client denied by server configuration: /var/www/_live/bolt.csabazar.hu/html/.htpasswd
[Thu Sep 17 16:12:17.345974 2026] [authz_core:err ...
show more
[Thu Sep 17 16:12:15.175649 2026] [authz_core:error] [pid 389614:tid 389641] [remote 34.75.118.169:51592] AH01630: client denied by server configuration: /var/www/_live/bolt.csabazar.hu/html/.htpasswd
[Thu Sep 17 16:12:17.345974 2026] [authz_core:error] [pid 389614:tid 389674] [remote 34.75.118.169:51592] AH01630: client denied by server configuration: /var/www/_live/bolt.csabazar.hu/html/server-status
[Thu Sep 17 16:12:15.175649 2026] [authz_core:error] [pid 389614:tid 389641] [remote 34.75.118.169:51592] AH01630: client denied by server configuration: /var/www/_live/bolt.csabazar.hu/html/.htpasswd
[Thu Sep 17 16:12:17.345974 2026] [authz_core:error] [pid 389614:tid 389674] [remote 34.75.118.169:51592] AH01630: client denied by server configuration: /var/www/_live/bolt.csabazar.hu/html/server-status
[Thu Sep 17 16:12:15.175649 2026] [authz_core:error] [pid 389614:tid 389641] [remote 34.75.118.169:51592] AH01630: client denied by server configuration: /var/www/_live/bolt.csabazar.hu/ht
...
show less
|
Brute-Force
Web App Attack
|
|
๐ฒ๐พ
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
๐ฎ๐น
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.75.118.169 (169.118.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 08:35:10.169096 2026] [security2:error] [pid 6362:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.118.169 (169.118.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 08:35:10.169096 2026] [security2:error] [pid 6362:tid 6362] [client 34.75.118.169:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.theabstractpress.com"] [uri "/@fs/app/.env"] [unique_id "aq6Bfh5POYb5GBQkkbEbwwAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ฉ๐ช
itsolon
|
|
[19/Sep/2026:06:52:53 +0200] 178979357326.455568 34.75.118.169 43334 217.154.7.177 443
[19/Sep/2026:06:52:53 +0200] 178979357332.124213 34.75.118.169 43334 217.154.7.177 443
[19/Sep/2026:06:52:54 +0200] 178979357494.871959 34.75.118.169 43334 217.154 ...
show more
[19/Sep/2026:06:52:53 +0200] 178979357326.455568 34.75.118.169 43334 217.154.7.177 443
[19/Sep/2026:06:52:53 +0200] 178979357332.124213 34.75.118.169 43334 217.154.7.177 443
[19/Sep/2026:06:52:54 +0200] 178979357494.871959 34.75.118.169 43334 217.154.7.177 443
[19/Sep/2026:06:52:54 +0200] 178979357491.194228 34.75.118.169 43334 217.154.7.177 443
[19/Sep/2026:06:52:54 +0200] 178979357485.959235 34.75.118.169 43334 217.154.7.177 443
...
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐ฉ๐ช
Philister11
|
|
CrowdSec: crowdsecurity/http-crawl-non_statics (US/AS396982)
|
Bad Web Bot
Web App Attack
|
|
๐ฎ๐น
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
๐ช๐ธ
masterguru
|
|
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-122)
|
Bad Web Bot
|
|
๐ณ๐ฑ
e.fierstra
|
|
excessive HTTP 404 errors
|
Bad Web Bot
|
|
๐ซ๐ท
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
๐ฉ๐ช
webanyone
|
|
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack
|
|
Anonymous
|
|
[Thu Sep 17 16:12:16.844803 2026] [proxy_fcgi:error] [pid 389614:tid 389668] [remote 34.75.118.169:51592] AH01071: Got error 'Primary script unknown'
[Thu Sep 17 16:12:16.845685 2026] [proxy_fcgi:error] [pid 389614:tid 389664] [remote 34.75.118.169:5 ...
show more
[Thu Sep 17 16:12:16.844803 2026] [proxy_fcgi:error] [pid 389614:tid 389668] [remote 34.75.118.169:51592] AH01071: Got error 'Primary script unknown'
[Thu Sep 17 16:12:16.845685 2026] [proxy_fcgi:error] [pid 389614:tid 389664] [remote 34.75.118.169:51592] AH01071: Got error 'Primary script unknown'
[Thu Sep 17 16:12:16.847404 2026] [proxy_fcgi:error] [pid 389614:tid 389654] [remote 34.75.118.169:51592] AH01071: Got error 'Primary script unknown'
...
show less
|
Brute-Force
Web App Attack
|