๐ฌ๐ง
Apache
2026-10-17 07:11:29
(39 minutes ago)
(mod_security) mod_security (id:930100) triggered by 34.187.119.56 (56.119.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:930100) triggered by 34.187.119.56 (56.119.187.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
๐ฉ๐ช
bazter.pro
2026-10-17 06:22:35
(1 hour ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
[email protected]
2026-10-17 06:02:39
(1 hour ago)
CrowdSec ban: crowdsecurity/http-admin-interface-probing (duration: 71h59m53s)
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-17 03:52:17
(3 hours ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt
Hacking
๐ฌ๐ท
setupgr
2026-10-17 01:36:21
(6 hours ago)
(mod_security) mod_security (id:11000010) triggered by 34.187.119.56 (NL/The Netherlands/Groningen/G ...
show more
(mod_security) mod_security (id:11000010) triggered by 34.187.119.56 (NL/The Netherlands/Groningen/Groningen/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 04:36:17.184941 2026] [security2:error] [pid 2828:tid 2882] [remote 34.187.119.56:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "113"] [id "11000010"] [msg "BLOCKED BOT: Amazonbot on santoriniicon.com"] [severity "ALERT"] [hostname "santoriniicon.com"] [uri "/z9x8c7v6b5-debug-trigger-santoriniicon.com"] [unique_id "atLREeY-u14IgMNEu2pPbQACjwY"]
show less
Port Scan
๐ฉ๐ช
lespbaj
2026-10-17 00:33:56
(7 hours ago)
{"time":"2026-10-17T00:33:54+00:00","ip":"34.187.119.56","method":"GET","uri":"/img../.env","ua":"Mo ...
show more
{"time":"2026-10-17T00:33:54+00:00","ip":"34.187.119.56","method":"GET","uri":"/img../.env","ua":"Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)","referer":""}
...
show less
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-16 10:54:04
(20 hours ago)
273 requests with url.path */@fs/*
129 requests with url.path */proc/*
Brute-Force
Bad Web Bot
๐ซ๐ฎ
tjs
2026-10-16 06:59:00
(1 day ago)
web attack
Hacking
Web App Attack
๐จ๐ณ
Bro Charlie
2026-10-16 04:51:12
(1 day ago)
34.187.119.56 - - [16/Oct/2026:12:51:09 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows ...
show more
34.187.119.56 - - [16/Oct/2026:12:51:09 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
34.187.119.56 - - [16/Oct/2026:12:51:09 +0800] "GET /robots.txt HTTP/1.1" 403 16922 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "-"
34.187.119.56 - - [16/Oct/2026:12:51:10 +0800] "POST / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-"
34.187.119.56 - - [16/Oct/2026:12:51:10 +0800] "GET /bnj6hmv655cukde4mgfp HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "-"
34.187.119.56 - - [16/Oct/2026:12:51:10 +0800] "GET /z9x8c7v6b5-debug-trigger-xliedu.cn HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "-"
34.187.119.56 - - [16/Oct/2026:12:51:10 +0800] "GET /tp7o8h80jor710xh46rb HTTP/1.1" 403 16922 "-"
...
show less
DDoS Attack
๐ฉ๐ช
AetherFox
2026-10-16 02:30:30
(1 day ago)
AetherFox VoidGuard detected: [Fri Oct 16 04:30:30.001925 2026] [authz_core:error] [pid 234220:tid 2 ...
show more
AetherFox VoidGuard detected: [Fri Oct 16 04:30:30.001925 2026] [authz_core:error] [pid 234220:tid 234230] [client 34.187.119.56:47612] AH01630: client denied by server configuration: proxy:https://136.243.123.86/
[Fri Oct 16 04:30:30.003535 2026] [authz_core:error] [pid 234220:tid 234230] [client 34.187.119.56:47612] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Fri Oct 16 04:30:30.030828 2026] [authz_core:error] [pid 234220:tid 234226] [client 34.187.119.56:47612] AH01630: client denied by server configuration: proxy:https://136.243.123.86/robots.txt
[Fri Oct 16 04:30:30.030945 2026] [authz_core:error] [pid 234220:tid 234226] [client 34.187.119.56:47612] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Fri Oct 16 04:30:30.041847 2026] [authz_core:error] [pid 234220:tid 234233] [client 34.187.119.56:47612] AH01630: client denied by server configuration: proxy:https://136.243.123.86/admin
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
vanadrighem.eu
2026-10-16 02:19:19
(1 day ago)
Automatic Fail2ban report
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-16 00:50:42
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2026-10-16 00:31:40
(1 day ago)
2026/10/16 02:31:39 [error] 73350#125248: *123569 limiting requests, excess: 0.999 by zone "crawler" ...
show more
2026/10/16 02:31:39 [error] 73350#125248: *123569 limiting requests, excess: 0.999 by zone "crawler", client: 34.187.119.56, server: ksol.io, request: "GET /firebase-adminsdk.json HTTP/2.0", host: "ksol.io"
...
show less
Bad Web Bot
๐ฌ๐ง
consul.to
2026-10-15 22:04:11
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-10-15 19:20:00
(1 day ago)
Aggressive crawling / scanning; Web application attack: grafana cve 2021 43798; Web application atta ...
show more
Aggressive crawling / scanning; Web application attack: grafana cve 2021 43798; Web application attack: http path traversal probing; Web application attack: http sensitive files; Web application attack: http cve 2021 41773
show less
Bad Web Bot
Web App Attack