๐น๐ท
neron
2026-08-20 12:25:59
(1 month ago)
CrowdSec blocked: tcp:scan detected via OPNsense firewall
Hacking
Web App Attack
๐ฎ๐ฑ
spd.co.il
2026-08-13 19:01:53
(1 month ago)
Web application attack detected
Hacking
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-11 19:45:34
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
grassau.com
2026-08-11 19:20:49
(1 month ago)
*Port Scan* detected from 109.199.123.153 (FR/France/Bas-Rhin/Lauterbourg/vmi3308834.contaboserver.n ...
show more
*Port Scan* detected from 109.199.123.153 (FR/France/Bas-Rhin/Lauterbourg/vmi3308834.contaboserver.net).
show less
Port Scan
๐ฌ๐ง
consul.to
2026-08-11 19:16:54
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
๐จ๐ญ
4server
2026-08-11 19:11:43
(1 month ago)
[TueAug1121:11:36.0930532026][security2:error][pid1366885:tid1366996][client109.199.123.153:0]ModSec ...
show more
[TueAug1121:11:36.0930532026][security2:error][pid1366885:tid1366996][client109.199.123.153:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hostingedominio.com\"][uri\"/.env.dev\"][unique_id\"antz6LbcBTdkj4fxXta1lAAAAAU\"]
show less
Hacking
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-11 18:58:59
(1 month ago)
cloudlinux2 fail2ban: 2026-08-11 20:54:47,347 fail2ban.filter [1708]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-11 20:54:47,347 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 109.199.123.153 - 2026-08-11 20:54:47cloudlinux2 fail2ban: 2026-08-11 20:54:47,369 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 109.199.123.153 - 2026-08-11 20:54:47cloudlinux2 fail2ban: 2026-08-11 20:54:47,355 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 109.199.123.153 - 2026-08-11 20:54:47cloudlinux2 fail2ban: 2026-08-11 20:54:47,391 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 109.199.123.153 - 2026-08-11 20:54:47cloudlinux2 fail2ban: 2026-08-11 20:54:47,362 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 109.199.123.153 - 2026-08-11 20:54:47cloudlinux2 fail2ban: 2026-08-11 20:54:47,406 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 109.199.123.153 - 2026-08-11 20:54:47cloudlinux2 fail2ban: 2026-08-11 20:54:47,377 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 109.199.123.153 -
show less
Brute-Force
๐ฌ๐ง
abivia
2026-08-11 18:28:47
(1 month ago)
Abivia WAF trigger: Rule staticSite: Request PHP file on a static site. uri: /config.php
Hacking
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-08-07 21:52:02
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ง๐ช
boxed-it
2026-08-07 09:25:47
(2 months ago)
GET /.env (Tarpitted for 1d15h8m29s, wasted 8.06MB)
Web App Attack
๐ง๐ช
boxed-it
2026-08-07 08:00:16
(2 months ago)
GET /wp-login.php (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
๐ง๐ช
boxed-it
2026-08-07 04:33:16
(2 months ago)
GET /wp-admin (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-22 17:48:56
(2 months ago)
cloudlinux2 fail2ban: 2026-07-22 19:45:30,101 fail2ban.filter [1589]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-07-22 19:45:30,101 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 106.219.68.211 - 2026-07-22 19:45:30cloudlinux2 fail2ban: 2026-07-22 19:45:59,369 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 209.172.2.80 - 2026-07-22 19:45:59cloudlinux2 fail2ban: 2026-07-22 19:46:32,989 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Ban 106.219.68.211cloudlinux2 fail2ban: 2026-07-22 19:46:32,789 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 106.219.68.211 - 2026-07-22 19:46:32cloudlinux2 fail2ban: 2026-07-22 19:46:33,013 fail2ban.filter [1589]: INFO [recidive] Found 106.219.68.211 - 2026-07-22 19:46:32cloudlinux2 fail2ban: 2026-07-22 19:47:32,187 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 109.199.123.153 - 2026-07-22 19:47:32cloudlinux2 fail2ban: 2026-07-22 19:47:33,673 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Ban 109.199.123.153cloudlinux2 fail2ban: 2026-07-22 19:47:30,206 f
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-22 17:32:12
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 109.199.123.153 (vmi3308834.contaboserver.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 109.199.123.153 (vmi3308834.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 13:32:07.024918 2026] [security2:error] [pid 1219886:tid 1219886] [client 109.199.123.153:60951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.37"] [uri "/.git/config"] [unique_id "amD-l2FadklE_-ytd8rqvAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-22 17:24:37
(2 months ago)
109.199.123.153 - - [22/Jul/2026:17:24:36 +0000] "GET /.git/config HTTP/1.1" 404 7808 "-" "Mozilla/5 ...
show more
109.199.123.153 - - [22/Jul/2026:17:24:36 +0000] "GET /.git/config HTTP/1.1" 404 7808 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack