2026-11-13 05:26:23
UTC ·
(15 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇫🇷
Octopuce
2026-11-13 03:53:34
UTC ·
(17 hours ago)
Aggressive web search of vulnerable pages: /packages/.env /apps/dashboard/.env /packages/api/.env /apps/marketing/.env /apps/web/.env ...
Web App Attack
🇩🇪
updown.io
2026-11-13 01:38:34
UTC ·
(19 hours ago)
{"level":"info","ts":1794533914.160887,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.241.78","remote_port":"41568","client_ip":"34.159.241.78","proto":"HTTP/2.0","method":"GET","host":"status.laflabo.com","uri ...
show more
{"level":"info","ts":1794533914.160887,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.241.78","remote_port":"41568","client_ip":"34.159.241.78","proto":"HTTP/2.0","method":"GET","host":"status.laflabo.com","uri":"/_profiler/latest","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.laflabo.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000040627,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1794533914.2273567,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.241.78","remote_port":"41568","client_ip":"34.159.241.78","proto":"HTTP/2.0","method":"GET","host":"status.laflabo.com","uri":"/litellm/models","headers":
...
show less
DDoS Attack
Web App Attack
🇩🇪
LRob
2026-11-13 01:32:52
UTC ·
(19 hours ago)
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36
Bad Web Bot
🇸🇪
vaia.cloud
2026-11-13 00:50:02
UTC ·
(20 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇩🇪
zumbo.net
2026-11-13 00:15:49
UTC ·
(20 hours ago)
[Fri Nov 13 03:15:40.741951 2026] [proxy_fcgi:error] [pid 386085:tid 386097] [client 34.159.241.78:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 03:15:43.174644 2026] [proxy_fcgi:error] [pid 386085:tid 386096] [client 34.159.241.78:0] AH ...
show more
[Fri Nov 13 03:15:40.741951 2026] [proxy_fcgi:error] [pid 386085:tid 386097] [client 34.159.241.78:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 03:15:43.174644 2026] [proxy_fcgi:error] [pid 386085:tid 386096] [client 34.159.241.78:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 03:15:49.189715 2026] [proxy_fcgi:error] [pid 386085:tid 386099] [client 34.159.241.78:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 03:15:49.195708 2026] [proxy_fcgi:error] [pid 386085:tid 386100] [client 34.159.241.78:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 03:15:49.197270 2026] [proxy_fcgi:error] [pid 386085:tid 386101] [client 34.159.241.78:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇺🇸
IndigoRidge
2026-11-13 00:10:22
UTC ·
(20 hours ago)
[Thu Nov 12 19:10:10.930383 2026] [authz_core:error] [pid 2344597:tid 140555136321280] [client 34.159.241.78:0] AH01630: client denied by server configuration: /var/www/vhosts/lakekeoweerealestate.com/error_docs/forbidden.html
[Thu Nov 12 19:10:17.46 ...
show more
[Thu Nov 12 19:10:10.930383 2026] [authz_core:error] [pid 2344597:tid 140555136321280] [client 34.159.241.78:0] AH01630: client denied by server configuration: /var/www/vhosts/lakekeoweerealestate.com/error_docs/forbidden.html
[Thu Nov 12 19:10:17.467663 2026] [authz_core:error] [pid 2344597:tid 140555220248320] [client 34.159.241.78:0] AH01630: client denied by server configuration: /var/www/vhosts/lakekeoweerealestate.com/httpdocs/nx.json
[Thu Nov 12 19:10:17.467761 2026] [authz_core:error] [pid 2344597:tid 140555220248320] [client 34.159.241.78:0] AH01630: client denied by server configuration: /var/www/vhosts/lakekeoweerealestate.com/error_docs/forbidden.html
[Thu Nov 12 19:10:21.871840 2026] [authz_core:error] [pid 2308575:tid 140554993710848] [client 34.159.241.78:0] AH01630: client denied by server configuration: /var/www/vhosts/lakekeoweerealestate.com/httpdocs/config.php.bak
[Thu Nov 12 19:10:21.871933 2026] [authz_core:error] [pid 2308575:tid 140554993710848] [client 34.159.2
...
show less
Web App Attack
🇳🇱
Site.eu
2026-11-12 23:04:55
UTC ·
(21 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-12 23:03:58
UTC ·
(22 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .d ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-197)
show less
Hacking
🇩🇪
IloGus
2026-11-12 22:30:13
UTC ·
(22 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
COMAITE
2026-11-12 22:19:30
UTC ·
(22 hours ago)
Suspicious URL access.
Web App Attack
🇮🇹
CoreTech srl
2026-11-12 21:43:56
UTC ·
(23 hours ago)
cloudlinux2 fail2ban: 2026-11-12 22:39:01,663 fail2ban.filter [1611]: INFO [plesk-modsecurity] Found 34.159.241.78 - 2026-11-12 22:39:01cloudlinux2 fail2ban: 2026-11-12 22:39:01,638 fail2ban.filter [1611]: INFO [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-11-12 22:39:01,663 fail2ban.filter [1611]: INFO [plesk-modsecurity] Found 34.159.241.78 - 2026-11-12 22:39:01cloudlinux2 fail2ban: 2026-11-12 22:39:01,638 fail2ban.filter [1611]: INFO [plesk-modsecurity] Found 34.159.241.78 - 2026-11-12 22:39:01cloudlinux2 fail2ban: 2026-11-12 22:39:01,533 fail2ban.filter [1611]: INFO [plesk-modsecurity] Found 34.159.241.78 - 2026-11-12 22:39:01cloudlinux2 fail2ban: 2026-11-12 22:39:01,629 fail2ban.filter [1611]: INFO [plesk-modsecurity] Found 34.159.241.78 - 2026-11-12 22:39:01cloudlinux2 fail2ban: 2026-11-12 22:39:01,576 fail2ban.filter [1611]: INFO [plesk-modsecurity] Found 34.159.241.78 - 2026-11-12 22:39:01cloudlinux2 fail2ban: 2026-11-12 22:39:01,783 fail2ban.filter [1611]: INFO [plesk-modsecurity] Found 34.159.241.78 - 2026-11-12 22:39:01cloudlinux2 fail2ban: 2026-11-12 22:39:01,766 fail2ban.filter [1611]: INFO [plesk-modsecurity] Found 34.159.241.78 - 2026-11-12 22:
show less
Brute-Force
2026-11-12 21:17:09
UTC ·
(23 hours ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇺🇸
antlac1
2026-11-12 20:57:24
UTC ·
(1 day ago)
CrowdSec detected malicious behaviour (scenario: crowdsecurity/http-admin-interface-probing)
Web App Attack
🇮🇹
VHosting
2026-11-12 19:50:04
UTC ·
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
