🇱🇻
GooddayGroup
2026-11-10 00:08:09
UTC ·
(2 days ago)
Automated probing for sensitive configuration files and environment leaks.
Brute-Force
Web App Attack
🇨🇦
zXero
2026-11-09 18:51:39
UTC ·
(3 days ago)
Fail2Ban automatic report - jail: web-exploit
Brute-Force
SSH
DDoS Attack
Anonymous
2026-11-09 16:22:00
UTC ·
(3 days ago)
[Mon Nov 09 17:21:57.583585 2026] [access_compat:error] [pid 946137:tid 946137] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.netlify
[Mon Nov 09 17:21:57.585370 2026] [access_compat:error] [p ...
show more
[Mon Nov 09 17:21:57.583585 2026] [access_compat:error] [pid 946137:tid 946137] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.netlify
[Mon Nov 09 17:21:57.585370 2026] [access_compat:error] [pid 944851:tid 944851] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.vercel
[Mon Nov 09 17:21:57.674236 2026] [access_compat:error] [pid 946130:tid 946130] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.next
[Mon Nov 09 17:21:57.676021 2026] [access_compat:error] [pid 944856:tid 944856] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.next
[Mon Nov 09 17:21:57.715440 2026] [access_compat:error] [pid 946087:tid 946087] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.next
...
show less
Web Spam
Web App Attack
🇮🇹
CoreTech srl
2026-11-09 15:45:52
UTC ·
(3 days ago)
cloudlinux2 fail2ban: 2026-11-09 16:38:43,697 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 160.179.53.163 - 2026-11-09 16:38:43cloudlinux2 fail2ban: 2026-11-09 16:39:40,271 fail2ban.filter [1667]: INFO [plesk-wordpress] ...
show more
cloudlinux2 fail2ban: 2026-11-09 16:38:43,697 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 160.179.53.163 - 2026-11-09 16:38:43cloudlinux2 fail2ban: 2026-11-09 16:39:40,271 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 103.81.214.85 - 2026-11-09 16:39:39cloudlinux2 fail2ban: 2026-11-09 16:40:40,640 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 31.23.204.169 - 2026-11-09 16:40:38cloudlinux2 fail2ban: 2026-11-09 16:41:23,419 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 27.79.191.198 - 2026-11-09 16:41:23cloudlinux2 fail2ban: 2026-11-09 16:42:12,574 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 136.144.19.14 - 2026-11-09 16:42:11cloudlinux2 fail2ban: 2026-11-09 16:42:31,336 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.179.149.91 - 2026-11-09 16:42:31cloudlinux2 fail2ban: 2026-11-09 16:42:36,224 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.179.149.91 - 2026-11-09 16:42:36clou
show less
Web App Attack
🇺🇸
Power Ca
2026-11-09 15:39:20
UTC ·
(3 days ago)
34.179.149.91 - - [09/Nov/2026:15:39:18 +0000] "GET /sitemap.xml HTTP/2.0" 404 55 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.179.149.91 - - [09/Nov/2026:15:39:18 +0000] "GET /si ...
show more
34.179.149.91 - - [09/Nov/2026:15:39:18 +0000] "GET /sitemap.xml HTTP/2.0" 404 55 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.179.149.91 - - [09/Nov/2026:15:39:18 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 61 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.179.149.91 - - [09/Nov/2026:15:39:19 +0000] "GET /0x6t68ygtue5rqea3sik HTTP/2.0" 404 64 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.179.149.91 - - [09/Nov/2026:15:39:19 +0000] "GET /dist/manifest.json HTTP/2.0" 404 62 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.179.149.91 - - [09/Nov/2026:15:39:19 +0000] "GET /manifest.json HTTP/2.0" 404 57 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.
...
show less
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-09 15:20:23
UTC ·
(3 days ago)
Azure WAF blocked a request. Rule: 100200. Observed at: 2026-11-09T15:18:03.000Z.
Web App Attack
🇩🇪
BlueWire Hosting
2026-11-09 12:56:17
UTC ·
(3 days ago)
Aggressive scanning resulting into 404
Bad Web Bot
Anonymous
2026-11-09 12:52:46
UTC ·
(3 days ago)
[Mon Nov 09 13:52:44.821272 2026] [access_compat:error] [pid 924835:tid 924835] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.netlify, referer: https://lecontrarien.com/.netlify/state.json
[Mo ...
show more
[Mon Nov 09 13:52:44.821272 2026] [access_compat:error] [pid 924835:tid 924835] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.netlify, referer: https://lecontrarien.com/.netlify/state.json
[Mon Nov 09 13:52:44.823607 2026] [access_compat:error] [pid 934380:tid 934380] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.next, referer: https://lecontrarien.com/.next/routes-manifest.json
[Mon Nov 09 13:52:44.826113 2026] [access_compat:error] [pid 924825:tid 924825] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.next, referer: https://lecontrarien.com/.next/server/pages/index.js
[Mon Nov 09 13:52:44.838146 2026] [access_compat:error] [pid 939796:tid 939796] [client 34.179.149.91:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.vercel, referer: https://lecontrarien.com/.vercel/project.json
[Mo
...
show less
Web Spam
Web App Attack
🇳🇱
debestelapp
2026-11-09 10:30:03
UTC ·
(3 days ago)
Web App Attack
🇺🇸
IndigoRidge
2026-11-09 09:08:27
UTC ·
(3 days ago)
[Mon Nov 09 04:08:26.034569 2026] [authz_core:error] [pid 1112009:tid 140060158588672] [client 34.179.149.91:0] AH01630: client denied by server configuration: /var/www/vhosts/lctusa.com/error_docs/forbidden.html
[Mon Nov 09 04:08:26.529221 2026] [au ...
show more
[Mon Nov 09 04:08:26.034569 2026] [authz_core:error] [pid 1112009:tid 140060158588672] [client 34.179.149.91:0] AH01630: client denied by server configuration: /var/www/vhosts/lctusa.com/error_docs/forbidden.html
[Mon Nov 09 04:08:26.529221 2026] [authz_core:error] [pid 1112009:tid 140060477347584] [client 34.179.149.91:0] AH01630: client denied by server configuration: /var/www/vhosts/lctusa.com/lctllc.com/google-services.json
[Mon Nov 09 04:08:26.529284 2026] [authz_core:error] [pid 1112009:tid 140060477347584] [client 34.179.149.91:0] AH01630: client denied by server configuration: /var/www/vhosts/lctusa.com/error_docs/forbidden.html
[Mon Nov 09 04:08:26.529918 2026] [authz_core:error] [pid 1112009:tid 140060452169472] [client 34.179.149.91:0] AH01630: client denied by server configuration: /var/www/vhosts/lctusa.com/lctllc.com/firebase.json
[Mon Nov 09 04:08:26.529960 2026] [authz_core:error] [pid 1112009:tid 140060452169472] [client 34.179.149.91:0] AH01630: client denied by serve
...
show less
Web App Attack
🇺🇸
IndigoRidge
2026-11-09 08:21:21
UTC ·
(3 days ago)
[Mon Nov 09 03:21:19.770733 2026] [authz_core:error] [pid 510833:tid 140555133826816] [client 34.179.149.91:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/sa.json
[Mon Nov 09 03:21:20.103053 2026] [authz_core:error] [pid ...
show more
[Mon Nov 09 03:21:19.770733 2026] [authz_core:error] [pid 510833:tid 140555133826816] [client 34.179.149.91:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/sa.json
[Mon Nov 09 03:21:20.103053 2026] [authz_core:error] [pid 365364:tid 140554717345536] [client 34.179.149.91:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.env
[Mon Nov 09 03:21:20.117556 2026] [authz_core:error] [pid 365364:tid 140554432124672] [client 34.179.149.91:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/push_config.json
[Mon Nov 09 03:21:20.575920 2026] [authz_core:error] [pid 365365:tid 140555284829952] [client 34.179.149.91:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/src
[Mon Nov 09 03:21:20.739906 2026] [authz_core:error] [pid 510833:tid 140554532804352] [client 34.179.149.91:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/frontend
...
show less
Web App Attack
🇮🇹
VHosting
2026-11-09 08:15:08
UTC ·
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-11-09 07:54:52
UTC ·
(3 days ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/), CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/ ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/), CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0. (+11 more) | path: /ctvkl2wnvd69ta9i93n9, /wmtbjr6b1mq4vjszy4z5, /dist/manifest.json (+17 more)
show less
Bad Web Bot
Anonymous
2026-11-09 07:50:42
UTC ·
(3 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇫🇷
dynamix
2026-11-09 07:46:07
UTC ·
(3 days ago)
Multiple WAF Violations
Web App Attack