๐ณ๐ฑ
Site.eu
2026-07-22 23:22:56
(17 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฎ๐ณ
evicky2002
2026-07-22 06:00:00
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐บ๐ธ
jormaster3k
2026-07-21 22:56:56
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 21:07:35
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.150.37.233 (233.37.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.150.37.233 (233.37.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 17:07:30.605445 2026] [security2:error] [pid 3420836:tid 3420836] [client 34.150.37.233:48992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||admin.workzoap.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "admin.workzoap.com"] [uri "/rclone.conf"] [unique_id "al_fkoLTialoqN-TKffHCgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
zumbo.net
2026-07-21 19:57:01
(1 day ago)
[Tue Jul 21 22:57:00.360671 2026] [proxy_fcgi:error] [pid 918643:tid 918649] [client 34.150.37.233:0 ...
show more
[Tue Jul 21 22:57:00.360671 2026] [proxy_fcgi:error] [pid 918643:tid 918649] [client 34.150.37.233:0] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 22:57:00.360903 2026] [proxy_fcgi:error] [pid 881499:tid 881528] [client 34.150.37.233:0] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 22:57:00.377258 2026] [proxy_fcgi:error] [pid 881499:tid 881527] [client 34.150.37.233:0] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 22:57:00.423593 2026] [proxy_fcgi:error] [pid 881499:tid 881504] [client 34.150.37.233:0] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 22:57:00.424165 2026] [proxy_fcgi:error] [pid 918643:tid 918669] [client 34.150.37.233:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-21 18:22:14
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
LRob
2026-07-21 18:02:40
(1 day ago)
CrowdSec: crowdsecurity/http-probing | req: /.git/config | 11 distinct paths | UA: Mozilla/5.0 (comp ...
show more
CrowdSec: crowdsecurity/http-probing | req: /.git/config | 11 distinct paths | UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
show less
Port Scan
Web App Attack
๐จ๐ฆ
cubie
2026-07-21 17:47:20
(1 day ago)
Port Scan: Admin Enumeration - Reported by CubieCloud Firewall [CFW_H243-009]
Port Scan
Anonymous
2026-07-21 17:29:00
(1 day ago)
[ns67.kdns.gr] httpd-config-scan: sites=kapaweb.gr,"kapaweb.gr","www.kweb.gr","ipv4.portal.kapaweb.g ...
show more
[ns67.kdns.gr] httpd-config-scan: sites=kapaweb.gr,"kapaweb.gr","www.kweb.gr","ipv4.portal.kapaweb.gr"; logs=/var/www/vhosts/kapaweb.gr/logs/access_ssl_log,/var/www/vhosts/system/kapaweb.gr/logs/access_ssl_log,/var/www/vhosts/system/kapaweb.gr/logs/proxy_access_ssl_log; samples=/.git/HEAD | /.env | /.aws/credentials
show less
Hacking
Web App Attack
๐ซ๐ท
Little Iguana
2026-07-21 17:09:53
(2 days ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
๐ซ๐ท
COMAITE
2026-07-21 17:04:12
(2 days ago)
Suspicious URL access.
Web App Attack
๐น๐ญ
thaizone.com
2026-07-21 16:58:13
(2 days ago)
Brute Force Attack on a Web Resources (probe) #1
DDoS Attack
Web Spam
Brute-Force
Web App Attack
๐ซ๐ท
guillaume illien
2026-07-21 16:54:59
(2 days ago)
34.150.37.233 - - [21/Jul/2026:16:54:56 +0000] "GET /assets/manifest.json HTTP/1.1" 404 197 "-" "Moz ...
show more
34.150.37.233 - - [21/Jul/2026:16:54:56 +0000] "GET /assets/manifest.json HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 14; 23021RAAEG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36"
34.150.37.233 - - [21/Jul/2026:16:54:59 +0000] "GET /assets/production/controllers/gantt_controller-6e71a0dcea51c63d1f9f079708de244a7fb6648dd5badf84671401889bbe5e4f.js.map HTTP/1.1" 404 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1"
34.150.37.233 - - [21/Jul/2026:16:54:59 +0000] "GET /assets/production/controllers/index-0b88f8bcfdada86e7ddcdce40441c46678a973b2e8e9226c9f21331b5e1a8757.js.map HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Safari/605.1.15"
34.150.37.233 - - [21/Jul/2026:16:54:59 +0000] "GET /assets/production/controllers/application-48e8b4d3dfcce7f7f8225f64dfd4717ff1874643325602d9eed
...
show less
Hacking
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
ger-stg-sifi1
2026-07-21 16:34:05
(2 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
rh24
2026-07-21 16:16:53
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.150.37.233 (HK/Hong Kong/233.37.150. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.150.37.233 (HK/Hong Kong/233.37.150.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection