🇮🇩
Chasserr
2026-11-11 03:30:22
UTC ·
(4 hours ago)
Port Scan
🇬🇧
consul.to
2026-11-10 08:04:12
UTC ·
(23 hours ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-11-08 19:05:08
UTC ·
(2 days ago)
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=35
Hacking
🇦🇺
paulshipley.com.au
2026-11-08 14:15:41
UTC ·
(2 days ago)
[Mon Nov 09 01:15:40.545433 2026] [security2:error] [pid 921353] [client 201.79.97.52:60492] [client 201.79.97.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Mon Nov 09 01:15:40.545433 2026] [security2:error] [pid 921353] [client 201.79.97.52:60492] [client 201.79.97.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.github"] [unique_id "avCEDAOBGQhF913R6L0UsAAAAAc"], referer: https://yandex.com/
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-08 09:28:47
UTC ·
(2 days ago)
[Sun Nov 08 20:28:46.570835 2026] [security2:error] [pid 898750] [client 201.79.97.52:65346] [client 201.79.97.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Sun Nov 08 20:28:46.570835 2026] [security2:error] [pid 898750] [client 201.79.97.52:65346] [client 201.79.97.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.github"] [unique_id "avBAzlboGGAXezorQFTjjwAAAAs"], referer: https://yandex.com/
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-08 06:04:09
UTC ·
(3 days ago)
[Sun Nov 08 17:04:08.822590 2026] [security2:error] [pid 880317] [client 201.79.97.52:52124] [client 201.79.97.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Sun Nov 08 17:04:08.822590 2026] [security2:error] [pid 880317] [client 201.79.97.52:52124] [client 201.79.97.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.github"] [unique_id "avAQ2CwwVW0KQS56nHXzRgAAABc"], referer: https://www.bing.com/
...
show less
Web App Attack
🇩🇪
jack252
2026-11-06 13:58:54
UTC ·
(4 days ago)
0xfc.de 201.79.97.52 - - [06/Nov/2026:14:58:49 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET /.well-known HTTP/1.1" 404 266 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0 ...
show more
0xfc.de 201.79.97.52 - - [06/Nov/2026:14:58:49 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET /.well-known HTTP/1.1" 404 266 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Mobile Safari/537.36 OPR/109.0.0.0"
0xfc.de 201.79.97.52 - - [06/Nov/2026:14:58:49 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET /wp-admin HTTP/1.1" 404 266 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
0xfc.de 201.79.97.52 - - [06/Nov/2026:14:58:49 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET /wp-content HTTP/1.1" 404 266 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
0xfc.de 201.79.97.52 - - [06/Nov/2026:14:58:50 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET /wp-includes HTTP/1.1" 404 266 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-06 10:44:13
UTC ·
(4 days ago)
"GET /.vscode HTTP/1.1" 404 83076 "/" "Mozilla/5.0 (iPad; CPU OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1"
Web App Attack
🇩🇪
Mr-Money
2026-11-06 06:49:24
UTC ·
(5 days ago)
scenario: crowdsecurity/http-probing - events: 11
Web App Attack
Hacking
🇩🇪
FeG Deutschland
2026-11-06 06:18:25
UTC ·
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-11-06 00:03:00
UTC ·
(5 days ago)
*Port Scan* detected from 201.79.97.52 (SG/Singapore/-). 11 hits in the last 25 seconds (0-215)
Port Scan
Anonymous
2026-11-05 20:11:00
UTC ·
(5 days ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇫🇷
david.houstin
2026-11-05 19:54:58
UTC ·
(5 days ago)
201.79.97.52 - - [05/Nov/2026:20:54:51 +0100] "GET /wp-content HTTP/1.1" 404 7310 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 24254 -
201.79.97.52 - - [05/Nov/2026:20:54:51 +0100] "GET /wp-includ ...
show more
201.79.97.52 - - [05/Nov/2026:20:54:51 +0100] "GET /wp-content HTTP/1.1" 404 7310 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 24254 -
201.79.97.52 - - [05/Nov/2026:20:54:51 +0100] "GET /wp-includes HTTP/1.1" 404 3592 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 16777 -
201.79.97.52 - - [05/Nov/2026:20:54:52 +0100] "GET /wp-json HTTP/1.1" 404 3591 "https://search.yahoo.com/" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Mobile Safari/537.36 EdgA/136.0.0.0" 11472 -
201.79.97.52 - - [05/Nov/2026:20:54:52 +0100] "GET /wp-content/plugins HTTP/1.1" 404 3592 "https://yandex.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 14100 -
201.79.97.52 - - [05/Nov/2026:20:54:53 +0100] "GET /wp-content/uploads HTTP/1.1" 404
...
show less
Web App Attack
Bad Web Bot
Anonymous
2026-11-05 19:40:31
UTC ·
(5 days ago)
Blocked by Fail2Ban via ModSecurity OWASP Rules
...
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-05 14:22:04
UTC ·
(5 days ago)
Web attack/malicious scanning detected
Web App Attack