🇸🇮
administrator
2026-11-03 23:19:50
UTC ·
(5 days ago)
2026-11-03 03:03:03,783 fail2ban.actions [1471361]: NOTICE [ninjafirewall-syslog] Ban 185.113.143.107
2026-11-03 03:03:03,785 fail2ban.actions [1471361]: NOTICE [media-server] Ban 185.113.143.107
2026-11-03 03:03:03,783 fail2ban.actio ...
show more
2026-11-03 03:03:03,783 fail2ban.actions [1471361]: NOTICE [ninjafirewall-syslog] Ban 185.113.143.107
2026-11-03 03:03:03,785 fail2ban.actions [1471361]: NOTICE [media-server] Ban 185.113.143.107
2026-11-03 03:03:03,783 fail2ban.actions [1471361]: NOTICE [ninjafirewall-syslog] Ban 185.113.143.107
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-11-03 20:56:33
UTC ·
(5 days ago)
IPS detection: HTTP.URI.SQL.Injection
Hacking
🇨🇿
Countryman
2026-11-03 20:56:33
UTC ·
(5 days ago)
IPS detection: HTTP.URI.SQL.Injection
Hacking
🇸🇪
KIDOS
2026-11-03 18:46:42
UTC ·
(6 days ago)
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
Web App Attack
🇬🇷
setupgr
2026-11-03 17:44:12
UTC ·
(6 days ago)
(mod_security) mod_security (id:9999001) triggered by 185.113.143.107 (PT/Portugal/Lisbon/Lisbon/-/[AS204094 Web Solutions, Lda]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:44:10.188355 ...
show more
(mod_security) mod_security (id:9999001) triggered by 185.113.143.107 (PT/Portugal/Lisbon/Lisbon/-/[AS204094 Web Solutions, Lda]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:44:10.188355 2026] [security2:error] [pid 2626:tid 2772] [client 185.113.143.107:38746] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^154\\\\.57\\\\.7\\\\.73$" at REQUEST_HEADERS:Host. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "154"] [id "9999001"] [msg "Direct incoming request to server shared IP blocked by admin"] [hostname "154.57.7.73"] [uri "/"] [unique_id "auodaNLd_gkKLSQRIsOlLwAAAc4"]
show less
Port Scan
🇫🇷
security.rdmc.fr
2026-11-03 09:04:42
UTC ·
(6 days ago)
SQL Injection Attempts
SQL Injection
🇪🇸
bohl-aiG5aef
2026-11-03 04:42:56
UTC ·
(6 days ago)
Suricata Alert [SID:2009714] ET WEB_SERVER Script tag in URI Possible Cross Site Scripting Attempt
Web App Attack
2026-11-02 22:57:21
UTC ·
(6 days ago)
[Mon Nov 02 17:32:44.076651 2026] [:error] [pid 2975210:tid 140068589127424] [client 185.113.143.107:46388] [client 185.113.143.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file ...
show more
[Mon Nov 02 17:32:44.076651 2026] [:error] [pid 2975210:tid 140068589127424] [client 185.113.143.107:46388] [client 185.113.143.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs-4.26.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.26.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "life-climamed.eu"] [uri "/jsonapi/node/article"] [unique_id "auitHMvRixk3CTvGtRb7OAAAAEQ"]
[Mon Nov 02 17:32:44.195585 2026] [:error] [pid 2975210:tid 140068521985792] [client 185.113.143.107:46388] [client 185.113.143.107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs-4.26.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.26.0
...
show less
Hacking
Web App Attack
🇸🇪
KIDOS
2026-11-02 22:14:53
UTC ·
(6 days ago)
malicious activity
Web App Attack
2026-11-02 22:07:19
UTC ·
(6 days ago)
IM360 WAF: Drupal SA-CORE-2026-004 (CVE-2026-9082) - SQL injection via Entity Query array-key pollution, PostgreSQL only (highly critical, 20/25) MV:filter[node_query][condition][value][1))/**/OR/*!00000*/CAST((SELECT/**/'Z'||UA:Mozilla/5.0 (SS; Linu ...
show more
IM360 WAF: Drupal SA-CORE-2026-004 (CVE-2026-9082) - SQL injection via Entity Query array-key pollution, PostgreSQL only (highly critical, 20/25) MV:filter[node_query][condition][value][1))/**/OR/*!00000*/CAST((SELECT/**/'Z'||UA:Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/...
show less
SQL Injection
🇸🇪
KIDOS
2026-11-01 19:52:04
UTC ·
(1 week ago)
Apache monitor: ssrf_log_spoofing
Brute-Force
SSH
🇫🇮
stinpriza
2026-10-31 17:32:10
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇮🇹
IRT@Unisi
2026-10-31 09:36:13
UTC ·
(1 week ago)
web_app3: Drupal.Core.jsonapi.SQL.Injection
Web App Attack
🇮🇪
RoboSOC
2026-10-30 23:55:57
UTC ·
(1 week ago)
Drupal Core translateCondition SQL Injection Vulnerability, PTR: PTR record not found
Hacking
