๐ฉ๐ช
FeG Deutschland
2026-07-31 21:18:11
(4 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
๐ฎ๐น
yvoictra
2026-07-31 12:22:48
(13 hours ago)
2026-07-31T14:22:47.739659+02:00 niove sshd-session[1198917]: Invalid user admin from 193.37.32.162 ...
show more
2026-07-31T14:22:47.739659+02:00 niove sshd-session[1198917]: Invalid user admin from 193.37.32.162 port 7460
...
show less
Brute-Force
SSH
๐น๐ท
neron
2026-07-31 01:06:18
(1 day ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ฉ๐ช
tsZero
2026-07-30 22:16:21
(1 day ago)
Scan example: path=/.git/HEAD status=302
Hacking
๐ฉ๐ช
4server
2026-07-30 21:18:49
(1 day ago)
[ThuJul3023:18:43.9719702026][security2:error][pid3454988:tid3455138][client193.37.32.162:0]ModSecur ...
show more
[ThuJul3023:18:43.9719702026][security2:error][pid3454988:tid3455138][client193.37.32.162:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.kiteinvest.ch.136-243-54-122.cpanel.site\"][uri\"/403.shtml\"][unique_id\"amu_s11TLiKgagHMzBrUKgAAARQ\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-07-30 19:20:06
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-07-30 19:07:32
(1 day ago)
193.37.32.162 - - [30/Jul/2026:21:07:07 +0200] "GET /feed/ HTTP/1.1" 200 6877 "-" "Mozilla/5.0 (comp ...
show more
193.37.32.162 - - [30/Jul/2026:21:07:07 +0200] "GET /feed/ HTTP/1.1" 200 6877 "-" "Mozilla/5.0 (compatible; wp2shell-check/1.0)"
193.37.32.162 - - [30/Jul/2026:21:07:09 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4565 "-" "Mozilla/5.0 (compatible; wp2shell-check/1.0)"
193.37.32.162 - - [30/Jul/2026:21:07:17 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4564 "-" "Mozilla/5.0 (compatible; wp2shell-check/1.0)"
show less
Web App Attack
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-07-30 16:29:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.162 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 12:29:06.790696 2026] [security2:error] [pid 2633601:tid 2633601] [client 193.37.32.162:59995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.podbillspec.drxcontent.com"] [uri "/.git/HEAD"] [unique_id "amt70kb1Bv7AMERAYis_BQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
bescared
2026-07-30 15:29:18
(1 day ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-30 14:06:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.162 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 10:06:09.190403 2026] [security2:error] [pid 43564:tid 43564] [client 193.37.32.162:37643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "360.visitbyblos.com"] [uri "/.git/HEAD"] [unique_id "amtaUdQEl4hr9aji_fst1gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
yvoictra
2026-07-30 12:10:47
(1 day ago)
2026-07-30T14:10:47.115303+02:00 niove sshd-session[980029]: Invalid user admin from 193.37.32.162 p ...
show more
2026-07-30T14:10:47.115303+02:00 niove sshd-session[980029]: Invalid user admin from 193.37.32.162 port 35454
...
show less
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-07-30 09:33:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.162 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 05:32:39.617128 2026] [security2:error] [pid 1097854:tid 1097951] [client 193.37.32.162:63165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rush2.piazza9.com"] [uri "/.env.production"] [unique_id "amsaNzab_M1LECNLzjPKhQAAAgs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-30 07:26:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.162 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 03:26:44.743498 2026] [security2:error] [pid 315344:tid 315347] [client 193.37.32.162:30581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ccgparquitectos.com"] [uri "/.git/HEAD"] [unique_id "amr8tDNwb1E_zg9LsE9lAwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-29 22:17:05
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
๐น๐ท
neron
2026-07-29 20:19:38
(2 days ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack