🇲🇽
Ariel_MX
2026-11-14 13:36:15
UTC ·
(8 minutes ago)
[Sat Nov 14 07:36:15.215228 2026] [authz_core:error] [pid 6205:tid 6205] [client 32.192.75.123:57558] AH01630: client denied by server configuration: /var/www/turip-demo/version_marhnos/, referer: https://marhnos.et.com.mx/
[Sat Nov 14 07:36:15.34336 ...
show more
[Sat Nov 14 07:36:15.215228 2026] [authz_core:error] [pid 6205:tid 6205] [client 32.192.75.123:57558] AH01630: client denied by server configuration: /var/www/turip-demo/version_marhnos/, referer: https://marhnos.et.com.mx/
[Sat Nov 14 07:36:15.343362 2026] [authz_core:error] [pid 6205:tid 6205] [client 32.192.75.123:57558] AH01630: client denied by server configuration: /var/www/turip-demo/version_marhnos/, referer: https://marhnos.et.com.mx/
...
show less
Web App Attack
🇩🇪
Hazzard
2026-11-14 13:28:12
UTC ·
(16 minutes ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇮🇩
securejdprop
2026-11-14 12:37:18
UTC ·
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-CVE-2025-55182.
Hacking
🇩🇪
Grossmann-Gruppe
2026-11-14 12:31:09
UTC ·
(1 hour ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
🇳🇱
pixelXp
2026-11-14 11:48:27
UTC ·
(1 hour ago)
Reason:15 (Hacking), Via: discgolf013.nl/, Message: [POST] Gevaarlijk woord 'eval' in Value in '0' [+35] #IN_KEYWORD{word=eval,part=value,field=0}
Hacking
Anonymous
2026-11-14 11:35:45
UTC ·
(2 hours ago)
Unauthorized access (443/tcp/https)
Port Scan
Web App Attack
🇨🇦
Redux
2026-11-14 11:33:40
UTC ·
(2 hours ago)
Automated abuse report, 2026-11-14 11:33:40–11:33:41 UTC, 4 events from this address. Ref A5B211.
Observed: Exploit attempt (x3); Vulnerability scanning.
Request: POST /
Law: TCK 243, 244; Dir. 2013/40/EU Art. 3, 5; ETS 185 Art. 2, 4; CMA 1990 s.1, s ...
show more
Automated abuse report, 2026-11-14 11:33:40–11:33:41 UTC, 4 events from this address. Ref A5B211.
Observed: Exploit attempt (x3); Vulnerability scanning.
Request: POST /
Law: TCK 243, 244; Dir. 2013/40/EU Art. 3, 5; ETS 185 Art. 2, 4; CMA 1990 s.1, s.3; 18 U.S.C. 1030(a)(2), 1030(a)(5).
OWASP OAT: OAT-014.
MITRE ATT&CK: T1190, T1595.002.
CAPEC: 310.
CWE: 200, 799, 841.
WASC: 21.
Action: requests refused, address blocked.
RexOS G0DBYE · Defending the open internet, together.
Full evidence: https://craftrank.org/evidence?r=A5B211
show less
Hacking
Web App Attack
🇨🇭
d0n1s1k
2026-11-14 11:30:57
UTC ·
(2 hours ago)
[BunkerWeb] block (reason: blacklist)
POST /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
Web App Attack
Brute-Force
🇺🇸
Rip
2026-11-14 11:16:38
UTC ·
(2 hours ago)
Remote Command Execution - Unix Shell Expression Found in URI
Web App Attack
🇫🇷
Zundapper
2026-11-14 11:11:38
UTC ·
(2 hours ago)
32.192.75.123 - - [14/Nov/2026:12:11:37 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.illustrami.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
32.192.75.123 - - [1 ...
show more
32.192.75.123 - - [14/Nov/2026:12:11:37 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.illustrami.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
32.192.75.123 - - [14/Nov/2026:12:11:37 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.3dmuseum.it/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
32.192.75.123 - - [14/Nov/2026:12:11:37 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.illustrami.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
32.192.75.123 - - [14/Nov/2026:12:11:37 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.3dmuseum.it/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 newsai/1.0 Safari/537.36"
32.192.75.123 - - [14/Nov/2026:12:11:37 +0100] "POST / HTTP/1.1" 404 548 "h
...
show less
Web App Attack
Port Scan
Anonymous
2026-11-14 11:07:04
UTC ·
(2 hours ago)
Abuse detected: rate-limit and/or cross-site thresholds exceeded.
Bad Web Bot
🇺🇸
Operator873
2026-11-14 11:06:21
UTC ·
(2 hours ago)
2026/11/14 05:06:18 [error] 899197#0: *3633674 access forbidden by rule, client: 32.192.75.123, server: [OBFUSCATED], request: "POST / HTTP/1.1", host: "[OBFUSCATED]", referrer: "https://[OBFUSCATED]/"
2026/11/14 05:06:18 [error] 899197#0: *3633674 a ...
show more
2026/11/14 05:06:18 [error] 899197#0: *3633674 access forbidden by rule, client: 32.192.75.123, server: [OBFUSCATED], request: "POST / HTTP/1.1", host: "[OBFUSCATED]", referrer: "https://[OBFUSCATED]/"
2026/11/14 05:06:18 [error] 899197#0: *3633674 access forbidden by rule, client: 32.192.75.123, server: [OBFUSCATED], request: "POST / HTTP/1.1", host: "[OBFUSCATED]", referrer: "https://[OBFUSCATED]/"
2026/11/14 05:06:18 [error] 899197#0: *3633674 access forbidden by rule, client: 32.192.75.123, server: [OBFUSCATED], request: "POST / HTTP/1.1", host: "[OBFUSCATED]", referrer: "https://[OBFUSCATED]/"
2026/11/14 05:06:18 [error] 899197#0: *3633674 access forbidden by rule, client: 32.192.75.123, server: [OBFUSCATED], request: "POST / HTTP/1.1", host: "[OBFUSCATED]", referrer: "https://[OBFUSCATED]/"
2026/11/14 05:06:18 [error] 899197#0: *3633674 access forbidden by rule, client: 32.192.75.123, server: influx.873gear.c
...
show less
Brute-Force
Web App Attack
🇨🇭
Kepler-1649c
2026-11-14 11:05:12
UTC ·
(2 hours ago)
Detected Attack: React.Server.Components.react-flight.Remote.Code.Execution
Hacking
🇬🇧
Apache
2026-11-14 11:01:54
UTC ·
(2 hours ago)
(mod_security) mod_security (id:932105) triggered by 32.192.75.123 (US/United States/ec2-32-192-75-123.compute-1.amazonaws.com): 5 in the last 300 secs (CF_ENABLE)
Brute-Force
Web App Attack
Anonymous
2026-11-14 10:35:24
UTC ·
(3 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host