🇫🇷
pm33
2026-10-16 04:23:06
(16 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-15 21:59:25
(22 hours ago)
Auto-ban: >3000 req/min op 2026-10-15
Web App Attack
SSH
Hacking
🇬🇧
sc user
2026-10-15 20:11:02
(1 day ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
🇪🇸
Francisco Vallejo
2026-10-15 07:39:43
(1 day ago)
[Thu Oct 15 09:39:42.814646 2026] [core:info] [pid 1755710:tid 1755736] [client 134.199.166.174:3113 ...
show more
[Thu Oct 15 09:39:42.814646 2026] [core:info] [pid 1755710:tid 1755736] [client 134.199.166.174:31134] AH00128: File does not exist: /var/www/barluna/wp
[Thu Oct 15 09:39:43.487189 2026] [core:info] [pid 1755665:tid 1755667] [client 134.199.166.174:31212] AH00128: File does not exist: /var/www/barluna/new
[Thu Oct 15 09:39:43.487250 2026] [core:info] [pid 1755710:tid 1755720] [client 134.199.166.174:31152] AH00128: File does not exist: /var/www/barluna/debug/default/index
[Thu Oct 15 09:39:43.487258 2026] [core:info] [pid 1755710:tid 1755732] [client 134.199.166.174:31174] AH00128: File does not exist: /var/www/barluna/vendor/laravel-filemanager/js/script.js
[Thu Oct 15 09:39:43.487267 2026] [core:info] [pid 1755710:tid 1755728] [client 134.199.166.174:31192] AH00128: File does not exist: /var/www/barluna/wordpress
...
show less
Brute-Force
SSH
🇺🇸
c y
2026-10-15 07:38:06
(1 day ago)
Security Monitor detected: sql_injection
Port Scan
🇺🇸
TPI-Abuse
2026-10-15 07:33:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 134.199.166.174 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.166.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:32:58.301286 2026] [security2:error] [pid 7856:tid 7856] [client 134.199.166.174:30986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkatthemoonpetsitting.com"] [uri "/.git/config"] [unique_id "atCBqqbkDJBMChAmWkatXQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-15 07:30:34
(1 day ago)
Excessive multi-domain requests
Brute-Force
2026-10-15 07:19:28
(1 day ago)
Detected by CrowdSec: crowdsecurity/CVE-2017-9841
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 07:14:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 134.199.166.174 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.166.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:14:33.124005 2026] [security2:error] [pid 8417:tid 8417] [client 134.199.166.174:54988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barecreationsaz.com"] [uri "/.env"] [unique_id "atB9WXGhwabRBLg-idwWRAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MyGlobalFlowers
2026-10-15 07:04:20
(1 day ago)
Multiple WAF Violations
Web App Attack
🇩🇪
sdos.es
2026-10-15 06:59:42
(1 day ago)
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"
Web App Attack
🇫🇷
masterguru
2026-10-15 06:54:43
(1 day ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-10-15 06:49:24
(1 day ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-15 06:36:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 134.199.166.174 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.166.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 02:36:11.426266 2026] [security2:error] [pid 17468:tid 17468] [client 134.199.166.174:22350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barabesi.net"] [uri "/.env"] [unique_id "atB0W5CMe2tdfus4dOantQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
AvonleaConsulting
2026-10-15 06:31:57
(1 day ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack