Anonymous
2026-09-08 11:58:00
UTC ·
(2 months ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MBombeck
2026-09-06 06:35:18
UTC ·
(2 months ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-05 22:01:42
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-04.
Web App Attack
SSH
Hacking
🇩🇪
Hazzard
2026-09-04 14:51:15
UTC ·
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-09-04 14:09:54
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.23.110 (110.23.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:09:46.709777 2026] [security2:error] [pid 23457:tid 23 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.23.110 (110.23.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:09:46.709777 2026] [security2:error] [pid 23457:tid 23457] [client 34.23.23.110:41274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.capecodbeachfront.com"] [uri "/wp-config.php~"] [unique_id "aprRKtSyurAC-cITDtti9wAAAH4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 13:38:25
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.23.110 (110.23.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:38:19.970298 2026] [security2:error] [pid 17351:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.23.110 (110.23.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:38:19.970298 2026] [security2:error] [pid 17351:tid 17351] [client 34.23.23.110:36654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiestadj.com.mx"] [uri "/.env.local"] [unique_id "aprJywBAik7nmNjhmDR8lgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-09-04 13:33:57
UTC ·
(2 months ago)
cloudlinux2 fail2ban: 2026-09-04 15:28:53,381 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 35.201.136.76 - 2026-09-04 15:28:53cloudlinux2 fail2ban: 2026-09-04 15:29:09,058 fail2ban.actions [1594]: NOTICE [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-09-04 15:28:53,381 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 35.201.136.76 - 2026-09-04 15:28:53cloudlinux2 fail2ban: 2026-09-04 15:29:09,058 fail2ban.actions [1594]: NOTICE [plesk-modsecurity] Unban 34.6.15.58cloudlinux2 fail2ban: 2026-09-04 15:29:24,114 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 209.42.28.9 - 2026-09-04 15:29:24cloudlinux2 fail2ban: 2026-09-04 15:29:27,868 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 193.56.116.73 - 2026-09-04 15:29:27cloudlinux2 fail2ban: 2026-09-04 15:29:42,309 fail2ban.actions [1594]: NOTICE [plesk-modsecurity] Unban 34.55.223.180cloudlinux2 fail2ban: 2026-09-04 15:30:12,942 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 34.23.23.110 - 2026-09-04 15:30:12cloudlinux2 fail2ban: 2026-09-04 15:30:12,896 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 34.23.23.110 - 2026-09-04 15:30:12cloudlinux2 fail2ban: 2026-09-04 15:30:12,951 fa
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-09-04 10:54:27
UTC ·
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇺🇸
CBJ
2026-09-04 10:09:28
UTC ·
(2 months ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇩🇪
MBombeck
2026-09-04 09:33:41
UTC ·
(2 months ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:09:06
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.23.110 (110.23.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:09:01.812597 2026] [security2:error] [pid 16341:tid 16 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.23.110 (110.23.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:09:01.812597 2026] [security2:error] [pid 16341:tid 16341] [client 34.23.23.110:36702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "listerman.org"] [uri "/.env.bak"] [unique_id "apqKrZBfWJMB_tdj0uQO2AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-04 08:28:03
UTC ·
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-09-04 08:03:42
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-04 08:01:03
UTC ·
(2 months ago)
Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1, GET /env HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /.env.production HTTP/1.1, GET /actuator/configprops HTT ...
show more
Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1, GET /env HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /.env.production HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.backup HTTP/1.1, GET /actuator/env HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.old HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /.env.dev HTTP/1.1, GET /wp-config.php.bak HTTP/1.1
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-09-04 07:24:06
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack