πΊπΈ
--KBXX--
2026-07-31 23:34:07
(1 month ago)
bfa, m365
Brute-Force
Anonymous
2025-05-08 18:52:45
(1 year ago)
Malicious activity detected
Hacking
Brute-Force
πΈπͺ
SkyDancer
2025-05-07 03:41:32
(1 year ago)
Multiple web intrusion attempts or RDP/SSH hacking using wrong credentials. Attack automatically blo ...
show more
Multiple web intrusion attempts or RDP/SSH hacking using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Ai-D
show less
Hacking
Brute-Force
SSH
π©πͺ
FeG Deutschland
2025-05-07 03:30:12
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 248
Exploited Host
Web App Attack
πΊπΈ
TPI-Abuse
2025-05-06 11:23:22
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 34.168.165.48 (48.165.168.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.168.165.48 (48.165.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 07:23:19.051280 2025] [security2:error] [pid 3258544:tid 3258544] [client 34.168.165.48:57940] [client 34.168.165.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||med-engineering.com|F|2"] [data ".tadalafil.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/www.tadalafil.com"] [unique_id "aBnxJzinH_U1oMaRvwRV2QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
i-turnradio.nl
2025-05-06 10:37:37
(1 year ago)
2025-05-06 @ 12:37:37 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
π¦πΊ
MAGIC
2025-05-02 03:07:10
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
πΈπͺ
Johan Finn
2025-04-30 13:41:21
(1 year ago)
malicious activity, botnet
Web App Attack
π·πΊ
cybertailor
2025-04-30 10:12:39
(1 year ago)
34.168.165.48 - - [30/Apr/2025:15:12:38 +0500] "GET /1972510646 HTTP/1.1" 307 16559 "-" "Mozilla/5.0 ...
show more
34.168.165.48 - - [30/Apr/2025:15:12:38 +0500] "GET /1972510646 HTTP/1.1" 307 16559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
...
show less
Bad Web Bot
πΊπΈ
RCS
2025-04-30 09:38:15
(1 year ago)
fail2ban apache-noscript
...
Bad Web Bot
Web App Attack
πͺπΈ
el-brujo
2025-04-29 15:22:42
(1 year ago)
Cloudflare WAF: Request Path: /juegos_y_consolas/moto_gp2_online-t107082.0.html Request Query: Host ...
show more
Cloudflare WAF: Request Path: /juegos_y_consolas/moto_gp2_online-t107082.0.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Action: log Source: firewallManaged ASN Description: GOOGLE-CLOUD-PLATFORM Country: US Method: GET Timestamp: 2025-04-29T15:22:42Z ruleId: 017d4edd6754438087991348543c4667. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
πΊπΈ
TPI-Abuse
2025-04-29 13:18:04
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 34.168.165.48 (48.165.168.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.168.165.48 (48.165.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 09:17:58.672128 2025] [security2:error] [pid 13661:tid 13686] [client 34.168.165.48:35104] [client 34.168.165.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||newtrendmag.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newtrendmag.org"] [uri "/[email protected] "] [unique_id "aBDRhuykQPdDUynRikQgDgAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
el-brujo
2025-04-29 08:28:47
(1 year ago)
Cloudflare WAF: Request Path: /noticias/convertidor.html Request Query: Host: www.elhacker.net user ...
show more
Cloudflare WAF: Request Path: /noticias/convertidor.html Request Query: Host: www.elhacker.net userAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Action: log Source: firewallManaged ASN Description: GOOGLE-CLOUD-PLATFORM Country: US Method: GET Timestamp: 2025-04-29T08:28:47Z ruleId: 017d4edd6754438087991348543c4667. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
π©πͺ
botreporter
2025-04-29 04:03:17
(1 year ago)
botnet ignoring robots.txt
Bad Web Bot
π¨π
backslash
2025-04-29 03:25:05
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot