🇫🇷
Tilellit.PRO
2026-09-22 01:18:04
(1 day ago)
Web application probing for unlinked paths and hidden files
Web App Attack
Hacking
🇫🇷
[email protected]
2026-09-22 00:44:11
(1 day ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
🇮🇹
CoreTech srl
2026-09-22 00:23:59
(1 day ago)
cloudlinux2 fail2ban: 2026-09-22 02:19:58,393 fail2ban.filter [1598]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-22 02:19:58,393 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 144.172.85.75 - 2026-09-22 02:19:58cloudlinux2 fail2ban: 2026-09-22 02:20:34,393 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.21.184.58 - 2026-09-22 02:20:34cloudlinux2 fail2ban: 2026-09-22 02:20:34,422 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.21.184.58 - 2026-09-22 02:20:34cloudlinux2 fail2ban: 2026-09-22 02:20:34,366 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.21.184.58 - 2026-09-22 02:20:34cloudlinux2 fail2ban: 2026-09-22 02:20:34,412 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.21.184.58 - 2026-09-22 02:20:34cloudlinux2 fail2ban: 2026-09-22 02:20:34,356 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.21.184.58 - 2026-09-22 02:20:34cloudlinux2 fail2ban: 2026-09-22 02:20:34,784 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.21.184.58 - 2026-09-22 02:20:34c
show less
Brute-Force
🇹🇼
tyetriiix
2026-09-22 00:09:38
(1 day ago)
Wazuh Alert Evidence: 34.21.184.58 - - [22/Sep/2026:00:09:36 +0000] "GET / HTTP/2.0" 403 168 "-" "Mo ...
show more
Wazuh Alert Evidence: 34.21.184.58 - - [22/Sep/2026:00:09:36 +0000] "GET / HTTP/2.0" 403 168 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
2026-09-22 00:05:14
(1 day ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 23:47:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.184.58 (58.184.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.184.58 (58.184.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:47:26.465640 2026] [security2:error] [pid 704:tid 704] [client 34.21.184.58:39940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wastetrack.io"] [uri "/.git/config"] [unique_id "arHCDrIqzQ-6S2nfc_xWfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-09-21 23:44:53
(1 day ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 34.21.184.58 (SG/Singapore/58.184.21.34.bc.googleusercontent.c ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 34.21.184.58 (SG/Singapore/58.184.21.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.21.184.58 - - [22/Sep/2026:01:44:51 +0200] "GET /id_ed25519 HTTP/2.0" 200 12040 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" host=mail.lasfiziosapizzeria.it
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-21 23:31:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.184.58 (58.184.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.184.58 (58.184.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:31:26.681657 2026] [security2:error] [pid 23704:tid 23704] [client 34.21.184.58:50590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alphatar.io"] [uri "/.git/HEAD"] [unique_id "arG-TgwnSjNoIiXiTU18EwAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Séfora Srl
2026-09-21 23:13:44
(1 day ago)
crowdsecurity/http-sensitive-files detected by CrowdSec
Web App Attack
🇩🇪
updown.io
2026-09-21 23:04:56
(1 day ago)
{"level":"info","ts":1790031889.4065857,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1790031889.4065857,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.21.184.58","remote_port":"55214","client_ip":"34.21.184.58","proto":"HTTP/2.0","method":"GET","host":"status.newstyleservice.it","uri":"/private-key","headers":{"X-Nextjs-Data":["1"],"User-Agent":["DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"],"Accept":["*/*"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.newstyleservice.it","ech":false}},"bytes_read":0,"user_id":"","duration":0.000200268,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1790031889.4132102,"logger":"http.log.access.log1","msg":"handled requ
...
show less
DDoS Attack
Web App Attack
🇩🇪
Lino Project
2026-09-21 22:48:28
(1 day ago)
34.21.184.58 - - [22/Sep/2026:00:48:25 +0200] "GET /.git/config HTTP/2.0" 403 50 "-" "Mozilla/5.0 (c ...
show more
34.21.184.58 - - [22/Sep/2026:00:48:25 +0200] "GET /.git/config HTTP/2.0" 403 50 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-21 22:04:08
(1 day ago)
235 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
🇮🇹
CoreTech srl
2026-09-21 21:53:59
(1 day ago)
cloudlinux2 fail2ban: 2026-09-21 23:49:26,949 fail2ban.filter [1598]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-21 23:49:26,949 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.74.153.21 - 2026-09-21 23:49:26cloudlinux2 fail2ban: 2026-09-21 23:49:27,150 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Ban 34.74.153.21cloudlinux2 fail2ban: 2026-09-21 23:49:27,061 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.74.153.21 - 2026-09-21 23:49:27cloudlinux2 fail2ban: 2026-09-21 23:49:26,724 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.74.153.21 - 2026-09-21 23:49:26cloudlinux2 fail2ban: 2026-09-21 23:49:27,157 fail2ban.filter [1598]: INFO [recidive] Found 34.74.153.21 - 2026-09-21 23:49:27cloudlinux2 fail2ban: 2026-09-21 23:50:45,994 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 185.79.30.55 - 2026-09-21 23:50:45cloudlinux2 fail2ban: 2026-09-21 23:51:25,903 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Ban 34.21.184.58cloudlinux2 fail2ban: 2026-09-21 23:51:25,538 fail2ban.filter
show less
Web App Attack
🇩🇪
MBombeck
2026-09-21 21:52:59
(1 day ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇬🇧
consul.to
2026-09-21 21:35:44
(1 day ago)
Web attack/malicious scanning detected
Web App Attack