🇩🇪
Phenix Info
2026-11-08 14:14:37
UTC ·
(6 days ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
2026-11-07 18:36:32
UTC ·
(1 week ago)
WEB attack
Brute-Force
🇩🇪
Phenix Info
2026-09-21 13:25:56
UTC ·
(1 month ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇨🇦
lakered
2026-09-11 06:22:24
UTC ·
(2 months ago)
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:1.00), High-Criminality-Signature (p0f:*:64:0:*:mss*44,9:mss,sok,ts,nop,ws:df,id+:0 - ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:1.00), High-Criminality-Signature (p0f:*:64:0:*:mss*44,9:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.97), Repeat-Offender (Past Bans: 1) | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot | TCP Fingerprint: Android Modern Android (Cellular) (Link:Unknown, Uptime:0m)
show less
Port Scan
2026-09-09 15:00:32
UTC ·
(2 months ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=4
Hacking
2026-08-31 07:46:03
UTC ·
(2 months ago)
WEB attack
Brute-Force
🇬🇷
setupgr
2026-08-29 13:00:11
UTC ·
(2 months ago)
(mod_security) mod_security (id:990005) triggered by 20.199.242.7 (CH/Switzerland/Geneva/Geneva/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Aug 29 16:00:06. ...
show more
(mod_security) mod_security (id:990005) triggered by 20.199.242.7 (CH/Switzerland/Geneva/Geneva/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Aug 29 16:00:06.994992 2026] [security2:error] [pid 156752:tid 923618] [remote 20.199.242.7:31275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "chatgpt-user" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "159"] [id "990005"] [msg "Blocked AI Scraper from Google Cloud Platform"] [hostname "ftiaxtomonosou.gr"] [uri "/%CF%86%CF%8C%CF%81%CE%BC%CE%B5%CF%82_%CF%80%CE%B1%CF%81%CE%B1%CE%B3%CE%B3%CE%B5%CE%BB%CE%AF%CE%B1%CF%82/"] [unique_id "apLX1uUYZPR3BeeNYpoGxgAElxs"]
show less
Port Scan
2026-08-29 09:36:34
UTC ·
(2 months ago)
LH-Watcher: FAKE_ID [Fake ChatGPT-User]
Bad Web Bot
🇩🇪
bancix
2026-08-19 06:35:39
UTC ·
(2 months ago)
Heimdall NIDS: Automatic ban triggered. Reason: RST_LIMIT_EXCEEDED (5/5)
Port Scan
2026-08-18 12:47:32
UTC ·
(2 months ago)
LH-Watcher: FAKE_ID [Fake ChatGPT-User]
Bad Web Bot
🇬🇷
setupgr
2026-08-13 07:23:30
UTC ·
(3 months ago)
(mod_security) mod_security (id:990005) triggered by 20.199.242.7 (CH/Switzerland/Geneva/Geneva/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Aug 13 10:23:26. ...
show more
(mod_security) mod_security (id:990005) triggered by 20.199.242.7 (CH/Switzerland/Geneva/Geneva/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Aug 13 10:23:26.155768 2026] [security2:error] [pid 2330047:tid 2330104] [remote 20.199.242.7:51802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "chatgpt-user" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "159"] [id "990005"] [msg "Blocked AI Scraper from Google Cloud Platform"] [hostname "tavernadimitris.com"] [uri "/"] [unique_id "an1w7gqCb0Fs4ScCGIlmSgABFgo"]
show less
Port Scan
🇮🇹
mgarofano80
2026-08-04 15:40:11
UTC ·
(3 months ago)
Brute-Force
Web App Attack
🇨🇦
lakered
2026-08-02 19:30:52
UTC ·
(3 months ago)
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d1712h2 - Ratio:0.94), High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:0.94) | UA: Mozilla/5.0 Appl ...
show more
Detectors: [NGINX-TRIAGE] | Reasons: Nginx: Proactive Triage | Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d1712h2 - Ratio:0.94), High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:0.94) | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot | TCP Fingerprint: Unknown (Link:Unknown, Uptime:0m)
show less
Port Scan
🇫🇷
Tilellit.PRO
2026-08-01 09:05:34
UTC ·
(3 months ago)
Malicious web traffic detected by CrowdSec
Hacking
