2026-07-12 07:20:37
(1 hour ago)
Web attack blocked by Wordfence on cuypersinvalkenburg.nl (4 hits). Reported by CRMON.
Web App Attack
🇩🇪
stinpriza
2026-07-11 09:19:08
(23 hours ago)
Web App Attack
Web App Attack
🇬🇧
Greg Poulson
2026-07-08 17:58:34
(3 days ago)
Our website was hit by this DDOS at a rate of 23 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force
🇺🇸
TPI-Abuse
2026-07-08 13:47:34
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 23.128.248.168 (tor-exit009.stormycloud.org): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 23.128.248.168 (tor-exit009.stormycloud.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 09:47:26.891785 2026] [security2:error] [pid 4228:tid 4228] [client 23.128.248.168:15104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sigridsnaturalfoods.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sigridsnaturalfoods.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ak5U7km_QVkzo520fN_EIAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-07-06 04:32:10
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 81). Ip 23.128.248.168 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-07-06 04:32:09.841825646 +0000 UTC
show less
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-07-06 03:21:32
(6 days ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 20:37:11
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 23.128.248.168 (tor-exit009.stormycloud.org): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 23.128.248.168 (tor-exit009.stormycloud.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:37:07.331463 2026] [security2:error] [pid 12327:tid 12327] [client 23.128.248.168:32906] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 23.128.248.168 (+1 hits since last alert)|natickvillagerentals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "natickvillagerentals.com"] [uri "/xmlrpc.php"] [unique_id "akgdc3y82zR90Q4P9mKR8gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-07-03 08:11:19
(1 week ago)
Web App Attack
Web App Attack
2026-07-03 02:19:18
(1 week ago)
Attempted search for exploits and vulnerabilities detected by fail2ban
...
Port Scan
Brute-Force
🇺🇸
mnsf
2026-07-01 13:08:25
(1 week ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-30 21:59:29
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-30
Web App Attack
SSH
Hacking
🇮🇩
securejdprop
2026-06-30 19:11:33
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 72). Ip 23.128.248.168 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-30 19:11:32.568112777 +0000 UTC
show less
Hacking
Web App Attack
🇩🇪
pltcldvlpr
2026-06-30 01:53:33
(1 week ago)
Bogus Useragent: 23.128.248.168 - - [30/Jun/2026:03:53:32 +0200] "GET /variationsbreite HTTP/2.0" 20 ...
show more
Bogus Useragent: 23.128.248.168 - - [30/Jun/2026:03:53:32 +0200] "GET /variationsbreite HTTP/2.0" 200 46616 "https://medien-wiki.de/variationsbreite" "Opera/9.80 (MAUI Runtime; Opera Mini/6.1.27412/174.78; U; en) Presto/2.12.423 Version/12.16" asn=400226 org="StormyCloud Inc" country=US
...
show less
Bad Web Bot
2026-06-29 20:12:03
(1 week ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 10:21:42
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 23.128.248.168 (tor-exit009.stormycloud.org): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 23.128.248.168 (tor-exit009.stormycloud.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 06:21:35.651931 2026] [security2:error] [pid 32567:tid 32601] [client 23.128.248.168:60346] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 23.128.248.168 (+1 hits since last alert)|maryschalkdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "maryschalkdesign.com"] [uri "/xmlrpc.php"] [unique_id "akJHLzgMzg_PsJYBWaVGKQAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
