|
🇨🇦
zXero
|
|
Fail2Ban automatic report - jail: recidive
|
Brute-Force
SSH
DDoS Attack
|
|
🇨🇦
zXero
|
|
Fail2Ban automatic report - jail: recidive
|
Brute-Force
SSH
DDoS Attack
|
|
🇨🇦
zXero
|
|
Fail2Ban automatic report - jail: recidive
|
Brute-Force
SSH
DDoS Attack
|
|
🇮🇳
evicky2002
|
|
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking
Brute-Force
SSH
|
|
🇨🇦
zXero
|
|
Fail2Ban automatic report - jail: recidive
|
Brute-Force
SSH
DDoS Attack
|
|
Anonymous
|
|
Multiple pen test attempts.
|
Web App Attack
|
|
🇨🇦
zXero
|
|
Fail2Ban automatic report - jail: web-exploit
|
Brute-Force
SSH
DDoS Attack
|
|
🇲🇽
octageeks.com
|
|
Wordpress malicious attack:[octablocked]
|
Web App Attack
|
|
🇺🇸
rdpguard.com
|
|
RdpGuard detected brute-force attempt on HTTP
|
Brute-Force
|
|
Anonymous
|
|
[Sun Sep 13 19:33:49.835638 2026] [security2:error] [pid 2077609:tid 2077609] [client 35.221.193.248:33972] [client 35.221.193.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modse ...
show more
[Sun Sep 13 19:33:49.835638 2026] [security2:error] [pid 2077609:tid 2077609] [client 35.221.193.248:33972] [client 35.221.193.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "warmides.com"] [uri "/host.key"] [unique_id "aqb6nUCFbpOGFxY-JrbpagAAAAA"]
[Sun Sep 13 19:33:49.994583 2026] [security2:error] [pid 2077611:tid 2077611] [client 35.221.193.248:33986] [client 35.221.193.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)
...
show less
|
Web App Attack
|
|
🇳🇱
svr
|
|
Abusive Automated Web Scanner
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.221.193.248 (248.193.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 15:13:34.657915 2026] [security2:error] [pid 22799:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 35.221.193.248 (248.193.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 15:13:34.657915 2026] [security2:error] [pid 22799:tid 22799] [client 35.221.193.248:55048] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||thelowensteinfamily.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thelowensteinfamily.com"] [uri "/z9x8c7v6b5-debug-trigger-thelowensteinfamily.com"] [unique_id "aqb13pgTEszzwiGqEphukwAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
rh24
|
|
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.221.193.248 (TW/Taiwan/248.193.221.35.bc.googleusercontent.com)
|
Bad Web Bot
|
|
Anonymous
|
|
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.221.193.248 (248.193.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 13:44:26.234229 2026] [security2:error] [pid 19035:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 35.221.193.248 (248.193.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 13:44:26.234229 2026] [security2:error] [pid 19035:tid 19035] [client 35.221.193.248:37108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sailorbandido.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sailorbandido.com"] [uri "/rclone.conf"] [unique_id "aqbg-kUxNLj8pZLXKZaEgQAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
