Anonymous
2026-11-07 04:32:19
UTC ·
(1 day ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇮🇹
CoreTech srl
2026-11-06 08:38:58
UTC ·
(2 days ago)
cloudlinux2 fail2ban: 2026-11-06 09:36:45,489 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 85.174.182.211 - 2026-11-06 09:36:45cloudlinux2 fail2ban: 2026-11-06 09:36:55,390 fail2ban.filter [1651]: INFO [plesk-modsecuri ...
show more
cloudlinux2 fail2ban: 2026-11-06 09:36:45,489 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 85.174.182.211 - 2026-11-06 09:36:45cloudlinux2 fail2ban: 2026-11-06 09:36:55,390 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 103.21.184.92 - 2026-11-06 09:36:55cloudlinux2 fail2ban: 2026-11-06 09:37:39,760 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 202.168.78.144 - 2026-11-06 09:37:39cloudlinux2 fail2ban: 2026-11-06 09:37:40,545 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 202.168.78.144 - 2026-11-06 09:37:40cloudlinux2 fail2ban: 2026-11-06 09:38:03,900 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.47.25.103 - 2026-11-06 09:38:03cloudlinux2 fail2ban: 2026-11-06 09:38:03,947 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.47.25.103 - 2026-11-06 09:38:03cloudlinux2 fail2ban: 2026-11-06 09:38:03,888 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.47.25.103 - 2026-11-06 09:
show less
Brute-Force
🇩🇪
Mr-Money
2026-11-06 07:16:17
UTC ·
(2 days ago)
scenario: crowdsecurity/http-probing - events: 11
Web App Attack
Hacking
🇳🇱
Savvii
2026-11-06 05:14:03
UTC ·
(2 days ago)
20 attempts against mh-misbehave-ban on burne
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-11-06 02:25:53
UTC ·
(2 days ago)
Repeated requests for suspicious nonexistent URLs, for example: /uploads../.env (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (c ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /uploads../.env (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)")
show less
Web App Attack
🇫🇮
sibahota
2026-11-06 02:08:07
UTC ·
(2 days ago)
34.47.25.103 - - [06/Nov/2026:02:08:06 +0000] admin.nidandiagnostic.com "GET /telescope/requests HTTP/2.0" 307 0 0.002 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 172.17.0.1:3050 307 0.003 "http://admin.nidandiagnostic.co ...
show more
34.47.25.103 - - [06/Nov/2026:02:08:06 +0000] admin.nidandiagnostic.com "GET /telescope/requests HTTP/2.0" 307 0 0.002 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 172.17.0.1:3050 307 0.003 "http://admin.nidandiagnostic.com/telescope/requests"
34.47.25.103 - - [06/Nov/2026:02:08:06 +0000] admin.nidandiagnostic.com "GET /config.php.bak HTTP/2.0" 307 0 0.003 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 172.17.0.1:3050 307 0.002 "http://admin.nidandiagnostic.com/config.php.bak"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 02:00:43
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇩🇪
bazter.pro
2026-11-06 01:59:20
UTC ·
(2 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇬🇧
Marten Mark
2026-11-06 01:53:31
UTC ·
(2 days ago)
34.47.25.103 - - [06/Nov/2026:01:53:24 +0000] "GET /z9x8c7v6b5-debug-trigger-cfi.co HTTP/2.0" 404 23059 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.47.25.103 - - [06/Nov/202 ...
show more
34.47.25.103 - - [06/Nov/2026:01:53:24 +0000] "GET /z9x8c7v6b5-debug-trigger-cfi.co HTTP/2.0" 404 23059 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.47.25.103 - - [06/Nov/2026:01:53:25 +0000] "GET /49876swiylia0oglrhwc HTTP/2.0" 404 23059 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.47.25.103 - - [06/Nov/2026:01:53:25 +0000] "GET /ngsw.json HTTP/2.0" 404 23059 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.47.25.103 - - [06/Nov/2026:01:53:25 +0000] "GET /.vite/manifest.json HTTP/2.0" 404 23059 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.47.25.103 - - [06/Nov/2026:01:53:25 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 404 23059 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537
...
show less
Port Scan
Web App Attack
🇺🇸
jormaster3k
2026-11-06 01:46:52
UTC ·
(2 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
Philister11
2026-11-06 01:17:35
UTC ·
(2 days ago)
CrowdSec: crowdsecurity/http-probing (CA/AS396982)
Web App Attack
Hacking
🇳🇱
Savvii
2026-11-06 00:59:23
UTC ·
(2 days ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mad-abuseip
2026-11-05 23:04:52
UTC ·
(2 days ago)
SCORE:99 REASON:suspicious-score:100 | "GET /api/console/api_server?apis=../../../../../../proc/self/environ&sense_version=%40%40SENSE_VERSION HTTP/1.1" SCORE:99 REASON:suspicious-score:100 - "Mozilla/5.0 (compatible; Bytespider; s***@bytedance.com) ...
show more
SCORE:99 REASON:suspicious-score:100 | "GET /api/console/api_server?apis=../../../../../../proc/self/environ&sense_version=%40%40SENSE_VERSION HTTP/1.1" SCORE:99 REASON:suspicious-score:100 - "Mozilla/5.0 (compatible; Bytespider; s***@bytedance.com) AppleWebKit/537.36"
show less
Web App Attack
🇹🇷
Jova
2026-11-05 22:06:55
UTC ·
(2 days ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇫🇷
dynamix
2026-11-05 22:02:14
UTC ·
(2 days ago)
Multiple WAF Violations
Web App Attack