🇩🇪
macrob
2026-07-20 13:54:36
(6 days ago)
2026/07/20 13:54:33 [error] 1774908#1774908: *392997885 access forbidden by rule, client: 157.66.56. ...
show more
2026/07/20 13:54:33 [error] 1774908#1774908: *392997885 access forbidden by rule, client: 157.66.56.84, server: binixo.com.ar, request: "GET /administrator/components/com_phocadownload/phocadownload.xml HTTP/2.0", host: "binixo.com.ar"
2026/07/20 13:54:34 [error] 1774911#1774911: *392997922 access forbidden by rule, client: 157.66.56.84, server: binixo.com.ar, request: "GET /administrator/components/com_phocadownload/com_phocadownload.xml HTTP/2.0", host: "binixo.com.ar"
2026/07/20 13:54:35 [error] 1774910#1774910: *392997967 access forbidden by rule, client: 157.66.56.84, server: binixo.com.ar, request: "GET /administrator/components/com_phocadownload/phocadownload.xml HTTP/2.0", host: "binixo.com.ar"
...
show less
Web App Attack
🇺🇸
deskpass.com
2026-07-20 12:48:19
(6 days ago)
GET /components/com_phocadownload/phocadownload.php
Web App Attack
🇳🇱
tr1n
2026-07-20 12:16:14
(6 days ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action: MANAGED_CHALLENGE | ASN: 58477 (Argon Dat ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action: MANAGED_CHALLENGE | ASN: 58477 (Argon Data Communication) | Protocol: HTTP/1.1 (GET) | Endpoint: /index.php | Timestamp: 2026-07-20T12:16:14Z | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7) AppleWebKit/605.1.15
show less
Bad Web Bot
🇳🇱
NL-crowdsec-reporter
2026-07-20 06:45:36
(6 days ago)
CrowdSec | Unauthorized Access | Country:ID | AS:Argon Data Communication
Web App Attack
Bad Web Bot
🇫🇷
ELYAZ
2026-07-19 09:12:58
(1 week ago)
(y3) Failed access -byebye- from 157.66.56.84 (ID/Indonesia/-): (CF_ENABLE)
Hacking
🇮🇹
VHosting
2026-04-13 15:35:03
(3 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
raymarron.com
2025-10-28 21:07:20
(8 months ago)
/.vscode/sftp.json
/sftp-config.json
Web App Attack
🇩🇪
www.Examensfragen.de
2025-10-24 20:22:04
(9 months ago)
Web Spam
Bad Web Bot
2025-10-23 23:00:03
(9 months ago)
Infected user bad webscan
Exploited Host
2025-10-23 15:15:22
(9 months ago)
Infected user bad webscan
Exploited Host
🇩🇪
LRob
2025-10-23 13:18:15
(9 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇮
oh.mg
2025-10-23 10:43:29
(9 months ago)
[Thu Oct 23 12:43:28.444818 2025] [security2:error] [pid 1936385:tid 1936403] [client 157.66.56.84:6 ...
show more
[Thu Oct 23 12:43:28.444818 2025] [security2:error] [pid 1936385:tid 1936403] [client 157.66.56.84:64581] [client 157.66.56.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "nei.lol"] [uri "/sftp-config.json"] [unique_id "aPoG0MR43Q82-OErX2QIwQAAABA"]
...
show less
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2025-10-23 09:06:23
(9 months ago)
[Thu Oct 23 11:06:20.223511 2025] [security2:error] [pid 743007:tid 743018] [client 157.66.56.84:0] ...
show more
[Thu Oct 23 11:06:20.223511 2025] [security2:error] [pid 743007:tid 743018] [client 157.66.56.84:0] [client 157.66.56.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.ca"] [uri "/fr/sftp-config.json"] [unique_id "aPnwDA-bavuZz2X6SVFzfgAAAEk"]
[Thu Oct 23 11:06:22.219339 2025] [security2:error] [pid 743007:tid 743021] [client 157.66.56.84:0] [client 157.66.56.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-23 05:53:15
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 157.66.56.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.66.56.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 01:53:10.057167 2025] [security2:error] [pid 2999:tid 2999] [client 157.66.56.84:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jspsf.com"] [uri "/sftp-config.json"] [unique_id "aPnCxjPbRR2hOmDlEFVX8gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bescared
2025-10-23 02:50:31
(9 months ago)
F2B - Malicious activity detected. Too many 403.
Hacking
Brute-Force
Bad Web Bot
Web App Attack