2026-09-18 06:37:50
(2 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐ฉ๐ช
LRob
2026-09-17 23:22:31
(9 hours ago)
Asking over plain http and never following the redirect served โ a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served โ a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-17 23:22 UTC
show less
Bad Web Bot
๐ซ๐ท
SpaceHost-Server
2026-09-17 22:16:38
(10 hours ago)
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-17 21:12:29
(12 hours ago)
20 attempts against mh-misbehave-ban on grape
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
securejdprop
2026-09-17 18:22:44
(14 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing.
Hacking
Web App Attack
๐ฉ๐ช
ใใใจใใใใ
2026-09-17 06:37:57
(1 day ago)
Observed path probing and abusive scanning against a self-hosted web service; no site identifiers in ...
show more
Observed path probing and abusive scanning against a self-hosted web service; no site identifiers included.
show less
Port Scan
Web App Attack
๐ช๐ธ
robotstxt
2026-09-16 22:45:59
(1 day ago)
158.158.94.71 - - [16/Sep/2026:22:45:19 +0000] "GET /database.sql HTTP/2.0" 400 150461 "-" "curl/7.8 ...
show more
158.158.94.71 - - [16/Sep/2026:22:45:19 +0000] "GET /database.sql HTTP/2.0" 400 150461 "-" "curl/7.81.0" "-"
158.158.94.71 - - [16/Sep/2026:22:45:20 +0000] "GET /database.bak HTTP/2.0" 400 150461 "-" "curl/7.81.0" "-"
158.158.94.71 - - [16/Sep/2026:22:45:21 +0000] "GET /db.bak HTTP/2.0" 400 150461 "-" "curl/7.81.0" "-"
158.158.94.71 - - [16/Sep/2026:22:45:26 +0000] "GET /default.aspx.bak HTTP/2.0" 400 150461 "-" "curl/7.81.0" "-"
158.158.94.71 - - [16/Sep/2026:22:45:27 +0000] "GET /login.aspx.bak HTTP/2.0" 400 150461 "-" "curl/7.81.0" "-"
...
show less
Web Spam
Web App Attack
2026-09-16 02:49:30
(2 days ago)
Aggressive web scan
Web App Attack
๐ฌ๐ง
consul.to
2026-09-15 18:18:15
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 14:34:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:34:31.944630 2026] [security2:error] [pid 1097137:tid 1097137] [client 158.158.94.71:45112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-hafeeztrust.net"] [uri "/web.config.bak"] [unique_id "aqlXdxLawLkhYvRFT7KZxAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-13 17:46:46
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 13:46:40.141111 2026] [security2:error] [pid 8867:tid 8867] [client 158.158.94.71:60476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.postermodelsxxx.com"] [uri "/web.config.bak"] [unique_id "aqbhgNVAAJyvb2-PPP644wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-13 16:32:53
(4 days ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐ฉ๐ช
LRob
2026-09-13 11:21:15
(4 days ago)
Asking over plain http and never following the redirect served โ a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served โ a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-13 11:21 UTC
show less
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-09-13 09:34:52
(4 days ago)
20 attempts against mh-misbehave-ban on grape
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-13 08:48:55
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 04:48:52.044124 2026] [security2:error] [pid 23124:tid 23124] [client 158.158.94.71:33274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justkoolit.com"] [uri "/web.config.bak"] [unique_id "aqZjdG4NCEwGy_Wbmnib4wAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack