๐ฉ๐ช
Marcel Bachmann
2026-10-02 07:12:27
(2 weeks ago)
Automated web scanner detected by HAProxy Security Center. Node: HA01. Reason: Fail2ban HAProxy Scan ...
show more
Automated web scanner detected by HAProxy Security Center. Node: HA01. Reason: Fail2ban HAProxy Scanner
show less
Web App Attack
Anonymous
2026-09-30 05:00:16
(3 weeks ago)
[BestVouchers.net] Honeypot trap triggered | Path: /.env | Time: 2026-09-30T05:00:16.310Z | UA: Mozi ...
show more
[BestVouchers.net] Honeypot trap triggered | Path: /.env | Time: 2026-09-30T05:00:16.310Z | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Action: Automatically blocked for 24h and reported
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 06:03:53
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.194.100 (100.194.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.194.100 (100.194.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:03:47.643719 2026] [security2:error] [pid 22378:tid 22378] [client 34.22.194.100:42776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bethanpearce.com"] [uri "/.git/config"] [unique_id "artUwzfPhrmTvFPkE46-OgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-28 07:31:38
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-09-28 06:17:44
(3 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-09-28 05:53:03
(3 weeks ago)
2026/09/28 06:52:51 [error] 3532288#3532288: *518441 access forbidden by rule, client: 34.22.194.100 ...
show more
2026/09/28 06:52:51 [error] 3532288#3532288: *518441 access forbidden by rule, client: 34.22.194.100, server: bestasquadradas.org, request: "GET /.env HTTP/2.0", host: "bestasquadradas.org"
34.22.194.100 - - [28/Sep/2026:06:52:51 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/09/28 06:53:00 [error] 3532286#3532286: *518510 access forbidden by rule, client: 34.22.194.100, server: bestasquadradas.org, request: "GET /app/.env HTTP/2.0", host: "bestasquadradas.org"
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Marcel Bachmann
2026-09-28 05:21:16
(3 weeks ago)
Automated web scanner detected by HAProxy Security Center. Node: HA01. Reason: Fail2ban HAProxy Scan ...
show more
Automated web scanner detected by HAProxy Security Center. Node: HA01. Reason: Fail2ban HAProxy Scanner
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 04:05:37
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.194.100 (100.194.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.194.100 (100.194.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 00:05:21.600572 2026] [security2:error] [pid 8840:tid 8840] [client 34.22.194.100:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "betiqos.com"] [uri "/.git/config"] [unique_id "ariWAYCCnCIO8EKLVRSnwQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 18:54:43
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.194.100 (100.194.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.194.100 (100.194.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:54:40.197340 2026] [security2:error] [pid 27580:tid 27580] [client 34.22.194.100:41994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pbeyer.org"] [uri "/.git/config"] [unique_id "arVx8Phgai6dDb8eW14yAQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 18:26:42
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.194.100 (100.194.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.194.100 (100.194.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:26:38.450052 2026] [security2:error] [pid 1301:tid 1301] [client 34.22.194.100:35274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pawlewicz.org"] [uri "/.git/config"] [unique_id "arVrXl09EeU2d5d9T-lBpQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-24 18:05:05
(4 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-09-24 00:53:32
(4 weeks ago)
Multiple WAF Violations
Web App Attack
๐ฌ๐ง
Apache
2026-09-22 09:32:40
(1 month ago)
(mod_security) mod_security (id:920500) triggered by 34.22.194.100 (BE/Belgium/100.194.22.34.bc.goog ...
show more
(mod_security) mod_security (id:920500) triggered by 34.22.194.100 (BE/Belgium/100.194.22.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-22 06:50:45
(1 month ago)
Excessive 404/403 errors
Brute-Force
๐ณ๐ฑ
homeshowdomain.nl
2026-09-21 22:02:43
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-20.
show less
Web App Attack
SSH
Hacking