🇬🇧
sc user
2026-09-22 23:16:32
(1 month ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot
Web App Attack
Port Scan
🇬🇧
sc user
2026-09-21 08:19:31
(1 month ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot
Web App Attack
Port Scan
🇬🇧
sc user
2026-09-18 22:17:37
(1 month ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot
Web App Attack
Port Scan
2026-09-18 11:08:25
(1 month ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ID, Attack patterns: WordPress scanning, Webshell probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-09-18 06:00:02
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇸🇬
pusathosting.com
2026-09-17 14:24:03
(1 month ago)
24ds22 bruteforce
Brute-Force
Web App Attack
2026-09-17 14:19:03
(1 month ago)
(PERMBLOCK) 172.235.240.44 (ID/Indonesia/172-235-240-44.ip.linodeusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
🇺🇸
TPI-Abuse
2026-09-17 13:57:08
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:57:02.806079 2026] [security2:error] [pid 17319:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:57:02.806079 2026] [security2:error] [pid 17319:tid 17319] [client 172.235.240.44:54656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teenybikini.com"] [uri "/wp-config.php"] [unique_id "aqvxrpl0-CSiau2UcFnQFQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-17 12:43:00
(1 month ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
2026-09-17 11:07:26
(1 month ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ID, Attack patterns: WordPress scanning, Webshell probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 10:29:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:29:04.974977 2026] [security2:error] [pid 10746:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:29:04.974977 2026] [security2:error] [pid 10746:tid 10746] [client 172.235.240.44:49836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tradersworldmarket.com"] [uri "/wp-config.php"] [unique_id "aqvA8IGH9cb2e8BNK3pVeQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 09:46:32
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:46:26.807651 2026] [security2:error] [pid 28588:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:46:26.807651 2026] [security2:error] [pid 28588:tid 28588] [client 172.235.240.44:62483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accordionfactory.com"] [uri "/wp-config.php"] [unique_id "aqu28mo1wrKWuOTm8V-cNgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 09:25:53
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:25:49.706462 2026] [security2:error] [pid 28390:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:25:49.706462 2026] [security2:error] [pid 28390:tid 28390] [client 172.235.240.44:60604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.musicfreakcentral.com"] [uri "/wp-config.php"] [unique_id "aquyHaG_nJe9XSFr6JwgpwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-09-17 08:48:16
(1 month ago)
Scanning for web/db/file exploits on www.eurosalt.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 08:38:08
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:38:04.651785 2026] [security2:error] [pid 31245:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.240.44 (172-235-240-44.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:38:04.651785 2026] [security2:error] [pid 31245:tid 31245] [client 172.235.240.44:51708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.orthopaedicsurgical.com"] [uri "/wp-config.php"] [unique_id "aqum7HTP5MjMdUADiliFXwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
