๐ฉ๐ช
MBombeck
2026-10-22 00:31:15
(1 day ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-21 22:02:15
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
Site.eu
2026-10-21 11:18:21
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
consul.to
2026-10-21 10:45:14
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-10-21 09:50:59
(1 day ago)
Blocked by ModSec and CSF
Port Scan
๐จ๐ฆ
CentiDevOps
2026-10-21 09:27:44
(1 day ago)
Web app scan: 13 requests in 1 min across 2 domains (301/499). Paths: /.git/config, /.env, /.env.loc ...
show more
Web app scan: 13 requests in 1 min across 2 domains (301/499). Paths: /.git/config, /.env, /.env.local (+2 more). Sample: 2026-10-21T09:27:44Z "GET /.git/config" 301
show less
Hacking
Web App Attack
๐ฟ๐ฆ
conure.sh
2026-10-21 09:20:09
(1 day ago)
csagent: score 19.8: secrets grab x2; 2 domain(s) in 8s
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 08:22:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.97.29 (29.97.16.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.97.29 (29.97.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 04:22:10.032289 2026] [security2:error] [pid 16516:tid 16516] [client 34.16.97.29:56830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coralseasbeach.com"] [uri "/.git/config"] [unique_id "ath2MjCKYhP19Wn3rK5x-QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 06:41:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.97.29 (29.97.16.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.97.29 (29.97.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 02:41:32.647377 2026] [security2:error] [pid 24624:tid 24624] [client 34.16.97.29:57938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cor-ex.com"] [uri "/.git/config"] [unique_id "athenEBZSkDXkPvydykjDgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-21 05:37:30
(1 day ago)
797 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
๐ฎ๐น
eliosbrocchi
2026-10-21 02:56:31
(2 days ago)
[Wed Oct 21 04:56:29.776989 2026] [proxy_fcgi:error] [pid 3515121:tid 3515158] [client 34.16.97.29:5 ...
show more
[Wed Oct 21 04:56:29.776989 2026] [proxy_fcgi:error] [pid 3515121:tid 3515158] [client 34.16.97.29:56322] AH01071: Got error 'Primary script unknown'
[Wed Oct 21 04:56:29.983674 2026] [proxy_fcgi:error] [pid 3515121:tid 3515163] [client 34.16.97.29:56322] AH01071: Got error 'Primary script unknown'
[Wed Oct 21 04:56:30.194707 2026] [proxy_fcgi:error] [pid 3515121:tid 3515161] [client 34.16.97.29:56322] AH01071: Got error 'Primary script unknown'
[Wed Oct 21 04:56:30.349598 2026] [proxy_fcgi:error] [pid 3515121:tid 3515165] [client 34.16.97.29:56322] AH01071: Got error 'Primary script unknown'
[Wed Oct 21 04:56:30.564094 2026] [proxy_fcgi:error] [pid 3515121:tid 3515164] [client 34.16.97.29:56322] AH01071: Got error 'Primary script unknown'
...
show less
VPN IP
๐ฟ๐ฆ
conure.sh
2026-10-21 02:11:48
(2 days ago)
csagent: score 19.9: secrets grab x2; 1 domain(s) in 7s
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-21 01:48:56
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.16.97.29 (US/United States/29.97.16.34.bc.go ...
show more
(mod_security) mod_security (id:949110) triggered by 34.16.97.29 (US/United States/29.97.16.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ฉ๐ช
LRob
2026-10-21 01:25:03
(2 days ago)
Secret file probe | method: GET | path: /.git/config, /.env | ua: Mozilla/5.0 (Windows NT 10.0; Win6 ...
show more
Secret file probe | method: GET | path: /.git/config, /.env | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 00:22:32
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.16.97.29 (29.97.16.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.97.29 (29.97.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:22:26.205424 2026] [security2:error] [pid 13813:tid 13813] [client 34.16.97.29:57246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "copierscharlotte.com"] [uri "/.git/config"] [unique_id "atgFwg8Y2S-2UklZyBaKhgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack