🇳🇱
homeshowdomain.nl
2026-11-07 22:59:57
UTC ·
(13 hours ago)
Auto-ban: >3000 req/min op 2026-11-07
Web App Attack
SSH
Hacking
🇬🇧
sc user
2026-11-07 21:13:31
UTC ·
(15 hours ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot
Web App Attack
Port Scan
🇳🇱
homeshowdomain.nl
2026-11-06 22:59:44
UTC ·
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.
Web App Attack
SSH
Hacking
🇬🇧
sc user
2026-11-05 20:29:46
UTC ·
(2 days ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot
Web App Attack
Port Scan
🇫🇷
Catalin Negru
2026-11-05 19:53:11
UTC ·
(2 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇫🇷
Zundapper
2026-11-05 17:48:09
UTC ·
(2 days ago)
34.129.6.246 - - [05/Nov/2026:18:48:07 +0100] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [05/Nov/2026:18:48:08 +0100] "POST / HTTP/1.1" 404 548 ...
show more
34.129.6.246 - - [05/Nov/2026:18:48:07 +0100] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [05/Nov/2026:18:48:08 +0100] "POST / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [05/Nov/2026:18:48:08 +0100] "POST / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [05/Nov/2026:18:48:08 +0100] "POST / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [05/Nov/2026:18:48:09 +0100] "GET /.git/config HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Port Scan
🇦🇪
CG
2026-11-05 10:32:36
UTC ·
(3 days ago)
Web application attack, Automated scan
Web App Attack
Hacking
SQL Injection
🇬🇧
consul.to
2026-11-05 08:44:29
UTC ·
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇪
cmbplf
2026-11-04 16:15:40
UTC ·
(3 days ago)
2.448 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇩🇪
Hazzard
2026-11-04 16:07:52
UTC ·
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
Anonymous
2026-11-04 13:36:17
UTC ·
(3 days ago)
34.129.6.246 - - [04/Nov/2026:15:36:12 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [04/Nov/2026:15:36:12 +0200] "POST / HTTP/1 ...
show more
34.129.6.246 - - [04/Nov/2026:15:36:12 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [04/Nov/2026:15:36:12 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [04/Nov/2026:15:36:12 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [04/Nov/2026:15:36:12 +0200] "GET /.git/config HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [04/Nov/2026:15:36:13 +0200] "GET /.env HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.129.6.246 - - [04/Nov/2026:15:36:1
...
show less
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-11-04 12:16:27
UTC ·
(4 days ago)
34.129.6.246 Probing protected path or service
Web App Attack
🇩🇪
4server
2026-11-04 11:28:13
UTC ·
(4 days ago)
[WedNov0412:28:07.6763572026][security2:error][pid2539804:tid2539945][client34.129.6.246:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacce ...
show more
[WedNov0412:28:07.6763572026][security2:error][pid2539804:tid2539945][client34.129.6.246:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"bluecirclecapital.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"ausWx5MlHXhUkrZdp1dMWQAAARU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-04 10:52:42
UTC ·
(4 days ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.129.6.246 - - [04/Nov/2026:11:52:39 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.129.6.246 - - [04/Nov/2026:11:52:39 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-11-04 10:15:09
UTC ·
(4 days ago)
Web App Attack