🇳🇱
Alt255
2026-10-12 22:49:26
(2 hours ago)
[ti-29al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-29al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 212.30.33.84 - - [13/Oct/2026:00:48:53 +0200] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 2043 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
212.30.33.84 - - [13/Oct/2026:00:48:53 +0200] "GET /backup/ HTTP/1.1" 404 41687 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
212.30.33.84 - - [13/Oct/2026:00:48:54 +0200] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 404 43087 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
212.30.33.84 - - [13/Oct/2026:00:48:55 +0200] "GET /Requests/Utility/ HTTP/1.1" 404 41687 "-" "Mozil
...
show less
Bad Web Bot
Web App Attack
2026-10-12 22:40:57
(2 hours ago)
IP matched detection query many 3xx errors.
Brute-Force
🇮🇹
CoreTech srl
2026-10-12 22:03:56
(2 hours ago)
cloudlinux2 fail2ban: 2026-10-12 23:58:49,867 fail2ban.filter [1878]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-12 23:58:49,867 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.90 - 2026-10-12 23:58:49cloudlinux2 fail2ban: 2026-10-12 23:59:01,591 fail2ban.actions [1878]: NOTICE [plesk-modsecurity] Unban 50.112.10.117cloudlinux2 fail2ban: 2026-10-12 23:58:56,677 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.55 - 2026-10-12 23:58:56cloudlinux2 fail2ban: 2026-10-12 23:58:53,783 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.228 - 2026-10-12 23:58:53cloudlinux2 fail2ban: 2026-10-12 23:59:05,799 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.66 - 2026-10-12 23:59:05cloudlinux2 fail2ban: 2026-10-12 23:59:37,642 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.78 - 2026-10-12 23:59:37cloudlinux2 fail2ban: 2026-10-12 23:59:42,496 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.228 - 2026-10-12 23:59:42cloudlinux2 fail2ban:
show less
Brute-Force
🇦🇺
rubixstudios
2026-10-12 19:30:02
(5 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
2026-10-12 19:05:57
(5 hours ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=240
Hacking
🇫🇷
dynamix
2026-10-12 18:00:04
(7 hours ago)
Multiple WAF Violations
Web App Attack
🇸🇪
vaia.cloud
2026-10-12 14:00:11
(11 hours ago)
crowdsecurity/http-backdoors-attempts
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 03:32:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:32:45.221488 2026] [security2:error] [pid 10402:tid 10422] [client 212.30.33.84:48539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robotics4fun.com"] [uri "/.env"] [unique_id "assDXRf4F5ipdLWOXHgOugAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:38:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:38:10.438906 2026] [security2:error] [pid 18727:tid 18727] [client 212.30.33.84:41727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "obramaq.cl"] [uri "/.env"] [unique_id "asrogh05QxzuAQwwiCe2rQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:16:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:16:06.869652 2026] [security2:error] [pid 21383:tid 21383] [client 212.30.33.84:49701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cygnuslabs.com"] [uri "/.env"] [unique_id "asrjViO4QUj28tgDFWQoeQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-25 15:10:06
(2 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-09-14 15:51:44
(4 weeks ago)
[ssd5.kdns.gr] httpd-suspicious-path: sites=www.colorbar.gr; logs=/var/log/httpd/domains/colorbar.gr ...
show more
[ssd5.kdns.gr] httpd-suspicious-path: sites=www.colorbar.gr; logs=/var/log/httpd/domains/colorbar.gr.log; samples=/wp-content/plugins/Nxploited/Nx.php | /wp-includes/core/SrHD3odefault.php
show less
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-11 03:33:34
(1 month ago)
[11/Sep/2026:06:33:34 +0300] -- 212.30.33.84 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-23 19:10:38
(1 month ago)
[23/Aug/2026:22:10:38 +0300] -- 212.30.33.84 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-07-16 21:30:04
(2 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
