🇳🇱
Site.eu
2026-10-23 10:19:41
(2 hours ago)
Excessive 404/403 errors
Brute-Force
2026-10-20 04:21:20
(3 days ago)
Repeated unauthorized connection attempts to restricted service observed.
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-10-18 05:26:36
(5 days ago)
SQL injection attempt from 20.233.250.77.
Web App Attack
🇦🇺
Bay13
2026-10-18 03:05:15
(5 days ago)
CrowdSec:custom/http-probing-multivhost
Web App Attack
🇫🇷
Catalin Negru
2026-10-17 23:28:19
(5 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇩🇪
ecs.ge
2026-10-17 07:32:24
(6 days ago)
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-17 04:57:15
(6 days ago)
(mod_security) mod_security (id:212620) triggered by 20.233.250.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 20.233.250.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 00:57:12.155221 2026] [security2:error] [pid 7976:tid 7976] [client 20.233.250.77:55866] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.jerrylogoluso.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /webshell4/login.php?err=\\x22><script>alert(document.domain)</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.jerrylogoluso.com"] [uri "/webshell4/login.php"] [unique_id "atMAKJrUpZJcG_nH8n98GAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-17 03:27:22
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-16 17:07:02
(6 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-16 16:08:02
(6 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02,wa01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 14:34:00
(6 days ago)
(mod_security) mod_security (id:211190) triggered by 20.233.250.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 20.233.250.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:33:54.360887 2026] [security2:error] [pid 5335:tid 5335] [client 20.233.250.77:49972] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||acmax.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_omphotogallery&controller=../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acmax.com"] [uri "/index.php"] [unique_id "atI10nPdOYsDV91a4NdrMAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 14:02:42
(6 days ago)
(mod_security) mod_security (id:211190) triggered by 20.233.250.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 20.233.250.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:02:38.566063 2026] [security2:error] [pid 2867:tid 2867] [client 20.233.250.77:46274] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||mail.walkerweb.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_biblestudy&id=1&view=studieslist&controller=../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.walkerweb.com"] [uri "/index.php"] [unique_id "atIufnYtMjxLLgB84rBMEAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
KIDOS
2026-10-16 13:07:59
(6 days ago)
Apache monitor: ssrf_log_spoofing
Brute-Force
SSH
🇲🇾
Rizzy
2026-10-16 09:53:17
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 05:31:38
(1 week ago)
(mod_security) mod_security (id:222550) triggered by 20.233.250.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:222550) triggered by 20.233.250.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:31:35.363652 2026] [security2:error] [pid 21775:tid 21775] [client 20.233.250.77:48050] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[^\\\\w\\\\ \\\\.]" at ARGS:list[fullordering]. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "95"] [id "222550"] [rev "1"] [msg "COMODO WAF: SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 (CVE-2017-8917)||hanabritgermanshepherds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hanabritgermanshepherds.com"] [uri "/index.php"] [unique_id "atG2t47mP0Wxq0jDUF-BRQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack