Anonymous
2026-09-28 20:24:47
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
Sonoflet
2026-09-28 05:42:20
(1 week ago)
CrowdSec detection | scenario: appsec-vpatch
Web App Attack
๐บ๐ธ
[email protected]
2026-09-28 04:26:29
(1 week ago)
CrowdSec ban: crowdsecurity/appsec-vpatch on unknown-host (duration 4h)
Web App Attack
๐ซ๐ท
Little Iguana
2026-09-27 14:56:29
(1 week ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
๐ฎ๐น
VHosting
2026-09-25 19:25:06
(2 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 23:44:02
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.13.194.123 (123.194.13.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.13.194.123 (123.194.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 19:43:55.427097 2026] [security2:error] [pid 29939:tid 29939] [client 34.13.194.123:45586] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||flysunshinecoast.com.au|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "flysunshinecoast.com.au"] [uri "/.env.bak"] [unique_id "arW1uyOtPtCy-1kEQQjsSQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 18:20:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.13.194.123 (123.194.13.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.13.194.123 (123.194.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:20:41.395643 2026] [security2:error] [pid 24774:tid 24774] [client 34.13.194.123:36690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.theuf.org"] [uri "/.git/config"] [unique_id "arVp-Rg6M9aGosBLqeJYTwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐ด
clauss
2026-09-24 04:25:29
(2 weeks ago)
34.13.194.123 - - [24/Sep/2026:07:25:29 +0300] "GET /phpinfo.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 ( ...
show more
34.13.194.123 - - [24/Sep/2026:07:25:29 +0300] "GET /phpinfo.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.194.123 - - [24/Sep/2026:07:25:29 +0300] "GET /info.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-22 10:53:54
(2 weeks ago)
[22/Sep/2026:13:53:54 +0300] -- 34.13.194.123 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[22/Sep/2026:13:53:54 +0300] -- 34.13.194.123 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-21 22:02:39
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-20.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
Alt255
2026-09-21 05:32:27
(2 weeks ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.13.194.123 - - [21/Sep/2026:07:32:19 +0200] "GET /.git/config HTTP/1.1" 301 488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 16:50:03
(2 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack