๐ฎ๐น
CoreTech srl
2026-09-19 15:48:57
(1 hour ago)
cloudlinux2 fail2ban: 2026-09-19 17:43:55,223 fail2ban.filter [1813]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-19 17:43:55,223 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 45.138.12.21 - 2026-09-19 17:43:55cloudlinux2 fail2ban: 2026-09-19 17:44:23,743 fail2ban.actions [1813]: NOTICE [plesk-modsecurity] Ban 154.208.40.113cloudlinux2 fail2ban: 2026-09-19 17:44:23,749 fail2ban.filter [1813]: INFO [recidive] Found 154.208.40.113 - 2026-09-19 17:44:23cloudlinux2 fail2ban: 2026-09-19 17:44:23,577 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 154.208.40.113 - 2026-09-19 17:44:23cloudlinux2 fail2ban: 2026-09-19 17:44:38,017 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 17:44:38cloudlinux2 fail2ban: 2026-09-19 17:44:37,606 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 17:44:37cloudlinux2 fail2ban: 2026-09-19 17:44:38,224 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 17:44:38cloudlinux2 fail2ban: 2026-09
show less
Brute-Force
Anonymous
2026-09-19 15:35:54
(1 hour ago)
34.80.44.144 - - [19/Sep/2026:17:35:30 +0200] "GET /.git/config HTTP/1.1" 403 610 "-" "Mozilla/5.0 ( ...
show more
34.80.44.144 - - [19/Sep/2026:17:35:30 +0200] "GET /.git/config HTTP/1.1" 403 610 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.44.144 - - [19/Sep/2026:17:35:31 +0200] "GET /.env HTTP/1.1" 403 610 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.44.144 - - [19/Sep/2026:17:35:31 +0200] "GET /.env.local HTTP/1.1" 403 610 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.44.144 - - [19/Sep/2026:17:35:31 +0200] "GET /.env.production HTTP/1.1" 403 610 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.44.144 - - [19/Sep/2026:17:35:31 +0200] "GET /.env.staging HTTP/1.1" 403 610 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.44.144 - - [19/Sep/2026:17:35:32 +0200] "GET /.
...
show less
DDoS Attack
๐ฎ๐น
Inartis
2026-09-19 15:23:15
(1 hour ago)
34.80.44.144 - - [19/Sep/2026:17:23:14 +0200] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 ( ...
show more
34.80.44.144 - - [19/Sep/2026:17:23:14 +0200] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-19 13:13:56
(3 hours ago)
cloudlinux2 fail2ban: 2026-09-19 15:09:32,621 fail2ban.filter [1813]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-19 15:09:32,621 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 77.102.49.133 - 2026-09-19 15:09:31cloudlinux2 fail2ban: 2026-09-19 15:10:33,275 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 15:10:33cloudlinux2 fail2ban: 2026-09-19 15:10:33,565 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 15:10:33cloudlinux2 fail2ban: 2026-09-19 15:10:32,631 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 15:10:32cloudlinux2 fail2ban: 2026-09-19 15:10:31,159 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 15:10:31cloudlinux2 fail2ban: 2026-09-19 15:10:32,808 fail2ban.filter [1813]: INFO [recidive] Found 34.80.44.144 - 2026-09-19 15:10:32cloudlinux2 fail2ban: 2026-09-19 15:10:34,416 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 15:10:34cloudlinux2
show less
Web App Attack
๐ฎ๐น
Progetto1
2026-09-19 12:55:03
(3 hours ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐จ๐ญ
4server
2026-09-19 11:55:46
(4 hours ago)
[SatSep1913:55:40.2325302026][security2:error][pid3127326:tid3127430][client34.80.44.144:0]ModSecuri ...
show more
[SatSep1913:55:40.2325302026][security2:error][pid3127326:tid3127430][client34.80.44.144:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"studiokellybenessere.ch\"][uri\"/\"][unique_id\"aq54PCeeWNnaYW5JsvtaAQAAAU0\"]
show less
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-09-19 10:33:00
(6 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-19 10:25:01
(6 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฎ๐น
Inartis
2026-09-19 10:15:50
(6 hours ago)
34.80.44.144 - - [19/Sep/2026:12:15:48 +0200] "GET /.git/config HTTP/1.1" 403 203 "-" "Mozilla/5.0 ( ...
show more
34.80.44.144 - - [19/Sep/2026:12:15:48 +0200] "GET /.git/config HTTP/1.1" 403 203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-19 07:44:47
(9 hours ago)
Multiple WAF Violations
Web App Attack
๐ฎ๐น
VHosting
2026-09-19 06:15:04
(10 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-19 06:01:08
(10 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฎ๐น
CoreTech srl
2026-09-19 05:58:56
(10 hours ago)
cloudlinux2 fail2ban: 2026-09-19 07:54:16,817 fail2ban.filter [1813]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-19 07:54:16,817 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 45.131.194.39 - 2026-09-19 07:54:15cloudlinux2 fail2ban: 2026-09-19 07:54:16,359 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 07:54:15cloudlinux2 fail2ban: 2026-09-19 07:54:17,166 fail2ban.actions [1813]: NOTICE [plesk-modsecurity] Ban 34.80.44.144cloudlinux2 fail2ban: 2026-09-19 07:54:17,055 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 07:54:17cloudlinux2 fail2ban: 2026-09-19 07:54:16,841 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 07:54:16cloudlinux2 fail2ban: 2026-09-19 07:54:16,411 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 07:54:16cloudlinux2 fail2ban: 2026-09-19 07:54:16,624 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.80.44.144 - 2026-09-19 07:54:16cloudlinux2 fail2ban: 2026-
show less
Web App Attack
๐ซ๐ท
โจ
2026-09-19 04:30:16
(12 hours ago)
Domain : studio242.co.uk
Rule : hack
2026-09-19 04:28:50 ***hidden-privacy*** GET /.env.bak - 443 - ...
show more
Domain : studio242.co.uk
Rule : hack
2026-09-19 04:28:50 ***hidden-privacy*** GET /.env.bak - 443 - 34.80.44.144 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - studio242.co.uk 404 0 0 13021 336 228 - -
show less
Hacking
SQL Injection
Brute-Force
๐ฟ๐ฆ
conure.sh
2026-09-19 04:20:35
(12 hours ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 2s
Web App Attack