🇳🇱
Alt255
2026-10-12 22:49:24
(11 hours ago)
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 212.30.33.92 - - [13/Oct/2026:00:49:24 +0200] "GET /wso.php HTTP/1.1" 301 559 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-12 20:09:52
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇸🇪
vaia.cloud
2026-10-12 14:05:06
(20 hours ago)
crowdsecurity/http-backdoors-attempts
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 03:49:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:49:13.202900 2026] [security2:error] [pid 11444:tid 11461] [client 212.30.33.92:56457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "property-management.company"] [uri "/.env"] [unique_id "assHOdw8RsieC_7GzZj2CQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:35:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:35:40.330850 2026] [security2:error] [pid 19500:tid 19500] [client 212.30.33.92:46569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skyesongtollers.com"] [uri "/.env"] [unique_id "asrn7J1SxSpCnRO3-BwhDQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:19:03
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:18:55.129341 2026] [security2:error] [pid 17027:tid 17027] [client 212.30.33.92:63509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "customweddingmatches.com"] [uri "/.env"] [unique_id "asrj_9YbtNsUEasykIrOMwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-09-14 19:09:33
(4 weeks ago)
IM360 WAF: Nxploited campaign webshell artifact access
Hacking
2026-09-14 15:51:37
(4 weeks ago)
[ssd5.kdns.gr] httpd-suspicious-path: sites=www.colorbar.gr; logs=/var/log/httpd/domains/colorbar.gr ...
show more
[ssd5.kdns.gr] httpd-suspicious-path: sites=www.colorbar.gr; logs=/var/log/httpd/domains/colorbar.gr.log; samples=/wp-includes/cookie.php | /wp-content/plugins/buddypress/alfa.php | /wp-includes/woocommerce-call.php
show less
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-11 00:38:32
(1 month ago)
[11/Sep/2026:03:38:31 +0300] -- 212.30.33.92 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-23 19:45:05
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-08-23 14:46:22
(1 month ago)
Banned by Fail2Ban on server
Web App Attack
2026-08-22 00:24:33
(1 month ago)
denied traffic to a honeypot network. destination port 53.
Port Scan
Hacking
🇱🇻
garmtech.com
2026-08-07 21:52:06
(2 months ago)
IM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:0
Hacking
2026-07-06 10:25:51
(3 months ago)
[da.kdns.gr] httpd-xmlrpc-post: sites=www.madesign.gr; logs=/var/log/httpd/domains/madesign.gr.log; ...
show more
[da.kdns.gr] httpd-xmlrpc-post: sites=www.madesign.gr; logs=/var/log/httpd/domains/madesign.gr.log; samples=//xmlrpc.php
show less
Brute-Force
Web App Attack
🇩🇪
Ba-Yu
2026-06-14 05:28:42
(3 months ago)
WordPress hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
