🇫🇮
kumiko
2026-05-19 14:55:47
UTC ·
(5 months ago)
[2026-05-19 17:55:46] Probing for exploits [1 requests]
"\x16\x03\x01" 301
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
genokrad
2026-05-19 00:33:56
UTC ·
(5 months ago)
Unauthorized connection attempt on TCP/9200 (Elasticsearch)
Port Scan
🇬🇧
Apache
2026-05-15 10:04:36
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 300 secs
Brute-Force
Web App Attack
🇩🇪
bescared
2026-05-15 10:00:22
UTC ·
(5 months ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-05-15 05:36:35
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇦
john doe
2026-05-15 04:58:07
UTC ·
(5 months ago)
SentinelBot: Env File Hunting (score: 73)
Bad Web Bot
🇮🇩
Burayot
2026-05-15 03:47:20
UTC ·
(5 months ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack
🇩🇪
LRob
2026-05-15 03:15:08
UTC ·
(5 months ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
Anonymous
2026-05-15 02:35:24
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:02:35:18 +000 ...
show more
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:02:35:18 +0000] "GET /.env.docker HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:02:35:18 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:02:35:18 +0000] "GET /api/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:02:35:18 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:02:35:18 +0000] "GET /.env.dev.local HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-15 01:52:30
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:52:27 +000 ...
show more
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:52:27 +0000] "GET /app/.env.local HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:52:27 +0000] "GET /api/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:52:27 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:52:27 +0000] "GET /.env.docker HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:52:27 +0000] "GET /.env.local HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-15 01:36:47
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:36:45 +000 ...
show more
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:36:45 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:36:45 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:36:45 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:36:45 +0000] "GET /api/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:36:45 +0000] "GET /.env.local HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-15 01:13:08
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:13:06 +000 ...
show more
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:13:06 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:13:06 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:13:06 +0000] "GET /.env.docker HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:13:06 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:01:13:06 +0000] "GET /.env.development.local HTTP/1.1"
show less
Port Scan
🇺🇸
Matthew Ping
2026-05-15 01:00:02
UTC ·
(5 months ago)
ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
Anonymous
2026-05-15 00:21:15
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:00:21:10 +000 ...
show more
(caddyscan) Scanner path probe from 34.32.29.111 (DE/Germany/111.29.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:00:21:10 +0000] "GET /app/.env.local HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:00:21:10 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:00:21:10 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:00:21:10 +0000] "GET /.env.development.local HTTP/1.1"
[REDACTED] 200 2627 34.32.29.111 - - [15/May/2026:00:21:10 +0000] "GET /api/.env HTTP/1.1"
show less
Port Scan
🇳🇱
wlt-blocker
2026-05-14 19:57:03
UTC ·
(5 months ago)
Unauthorized access to webpage admin
Web App Attack