π©πͺ
ecs.ge
2026-09-29 01:13:59
(22 hours ago)
Automatic Fail2Ban report from jail plesk-panel: multiple matching events detected.
Brute-Force
π©πͺ
robotstxt
2026-09-26 09:15:01
(3 days ago)
172.70.93.73 - - [26/Sep/2026:09:14:20 +0000] "GET /.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows N ...
show more
172.70.93.73 - - [26/Sep/2026:09:14:20 +0000] "GET /.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.207.55" edge="172.70.93.73"
172.70.93.73 - - [26/Sep/2026:09:14:21 +0000] "GET /.env.local HTTP/2.0" 403 95628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.207.55" edge="172.70.93.73"
172.70.93.73 - - [26/Sep/2026:09:14:25 +0000] "GET /.env.production HTTP/2.0" 403 95671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.207.55" edge="172.70.93.73"
172.70.93.73 - - [26/Sep/2026:09:14:27 +0000] "GET /.env.staging HTTP/2.0" 403 95831 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.207.55" edge="172.70.93.73"
172.70.93.73 - - [26/Sep/2026:09:14:29 +0000] "GET /.en
...
show less
Web App Attack
πΈπ¬
simpeg-adm.bandung.go.id
2026-09-26 08:32:25
(3 days ago)
...
Web Spam
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-25 23:17:49
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.93.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.93.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 19:17:43.884007 2026] [security2:error] [pid 25321:tid 25321] [client 172.70.93.73:13358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.japanesejapan.info.smogsandiego.com"] [uri "/.env.production"] [unique_id "arcBF-_p8ArCHMfA-GusewAAABU"], referer: https://www.google.com/search?q=www.japanesejapan.info.smogsandiego.com
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
ecs.ge
2026-09-25 21:22:53
(4 days ago)
Automatic Fail2Ban report from jail plesk-panel: multiple matching events detected.
Brute-Force
Anonymous
2026-09-22 08:04:08
(1 week ago)
[Tue Sep 22 10:04:06.860345 2026] [authz_core:error] [pid 7649] [client 172.70.93.73:9400] AH01630: ...
show more
[Tue Sep 22 10:04:06.860345 2026] [authz_core:error] [pid 7649] [client 172.70.93.73:9400] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 22 10:04:07.791659 2026] [authz_core:error] [pid 7649] [client 172.70.93.73:9400] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 22 10:04:08.143458 2026] [authz_core:error] [pid 7649] [client 172.70.93.73:9400] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-09-21 20:11:03
(1 week ago)
[Mon Sep 21 22:10:53.099325 2026] [authz_core:error] [pid 20037] [client 172.70.93.73:9916] AH01630: ...
show more
[Mon Sep 21 22:10:53.099325 2026] [authz_core:error] [pid 20037] [client 172.70.93.73:9916] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 21 22:10:54.330872 2026] [authz_core:error] [pid 20037] [client 172.70.93.73:9916] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 21 22:11:02.406728 2026] [authz_core:error] [pid 20030] [client 172.70.93.73:9783] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-09-19 09:10:21
(1 week ago)
[Sat Sep 19 11:10:14.624110 2026] [authz_core:error] [pid 11096] [client 172.70.93.73:10156] AH01630 ...
show more
[Sat Sep 19 11:10:14.624110 2026] [authz_core:error] [pid 11096] [client 172.70.93.73:10156] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.com/search?q=antler-snacks.com
[Sat Sep 19 11:10:16.418281 2026] [authz_core:error] [pid 27978] [client 172.70.93.73:10699] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.com/search?q=antler-snacks.com
[Sat Sep 19 11:10:20.387104 2026] [authz_core:error] [pid 27978] [client 172.70.93.73:10699] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.com/search?q=antler-snacks.com
...
show less
Web App Attack
π§πͺ
madeit
2026-09-18 08:46:43
(1 week ago)
Web App Attack
π©πͺ
Grossmann-Gruppe
2026-09-08 17:36:55
(3 weeks ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
π³π±
homeshowdomain.nl
2026-09-07 21:59:18
(3 weeks ago)
Auto-ban: >3000 req/min op 2026-09-07
Web App Attack
SSH
Hacking
πΊπΈ
mawan
2026-08-22 18:54:39
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
πΊπΈ
mawan
2026-08-19 12:54:06
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-17 09:45:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.93.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.93.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:45:52.562675 2026] [security2:error] [pid 31607:tid 31607] [client 172.70.93.73:13458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wehaveajobforyou.org"] [uri "/.git/config"] [unique_id "aoLYUGhTHfxdH0eebJ9LmQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-17 06:10:40
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.93.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.93.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:10:33.666368 2026] [security2:error] [pid 2707:tid 2707] [client 172.70.93.73:13072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.qosmexico.com"] [uri "/.git/HEAD"] [unique_id "aoKl2fPVDIYnmfsaG_eOrgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack