🇪🇸
Hugopvigo
2025-05-28 00:27:43
(1 year ago)
[Tue May 27 12:47:36.593845 2025] [security2:error] [pid 1764588] [client 178.175.167.128:53026] [cl ...
show more
[Tue May 27 12:47:36.593845 2025] [security2:error] [pid 1764588] [client 178.175.167.128:53026] [client 178.175.167.128] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "5.56.62.103"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "5.56.62.103"] [uri "/"] [unique_id "aDWYSAasc1nsNXJqzsok5QAAAAA"]
[Tue May 27 23:19:32.070848 2025] [security2:error] [pid 1775724] [client 178.175.167.128:65507] [client 178.175.167.128] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header
...
show less
Hacking
Brute-Force
Web App Attack
SSH
🇧🇷
omelhor.net
2025-05-27 22:03:00
(1 year ago)
tentativa de acessos indevidos
Port Scan
Hacking
Brute-Force
Web App Attack
🇬🇧
pearbright
2025-05-27 21:42:44
(1 year ago)
2025-05-27T21:19:58.419054+00:00 srv740043 kernel: [7635460.417173] [UFW BLOCK] IN=eth0 OUT= MAC=bc: ...
show more
2025-05-27T21:19:58.419054+00:00 srv740043 kernel: [7635460.417173] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=178.175.167.128 DST=147.93.84.193 LEN=44 TOS=0x08 PREC=0x20 TTL=233 ID=52973 PROTO=TCP SPT=40786 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0
2025-05-27T21:26:23.029297+00:00 srv740043 kernel: [7635845.027709] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=178.175.167.128 DST=147.93.84.193 LEN=44 TOS=0x08 PREC=0x20 TTL=233 ID=20276 PROTO=TCP SPT=40984 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0
2025-05-27T21:30:05.442910+00:00 srv740043 kernel: [7636067.441312] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=178.175.167.128 DST=147.93.84.193 LEN=44 TOS=0x08 PREC=0x20 TTL=233 ID=21769 PROTO=TCP SPT=40984 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0
2025-05-27T21:30:44.298845+00:00 srv740043 kernel: [7636106.297515] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=178.175.167
...
show less
Port Scan
🇬🇧
Shadymint
2025-05-26 11:06:12
(1 year ago)
url probing
Web App Attack
🇳🇱
Savvii
2025-05-21 18:14:24
(1 year ago)
12 attempts against mh-misc-ban on pf221103
Web App Attack
🇳🇱
Savvii
2025-05-21 17:24:17
(1 year ago)
10 attempts against mh-misc-ban on pf221103
Web App Attack
🇬🇧
moebius
2025-05-20 03:42:23
(1 year ago)
GET /.git/config HTTP/1.1" 400 248 "-" "python-httpx/0.28.1" "-"
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-05-13 08:22:17
(1 year ago)
2 port probes: 2x tcp/443 (https)
[srv135,srv127]
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-05-13 08:16:57
(1 year ago)
2 port probes: 2x tcp/443 (https)
[srv136,srv124]
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-20 11:18:04
(1 year ago)
(mod_security) mod_security (id:221260) triggered by 178.175.167.128 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:221260) triggered by 178.175.167.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 20 06:17:57.470955 2025] [security2:error] [pid 5866:tid 5866] [client 178.175.167.128:58740] [client 178.175.167.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||dansplans.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dansplans.com"] [uri "/"] [unique_id "Z7cPZSj1iutUnDmJwCNjpQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack