Anonymous
2026-09-06 10:27:34
(1 day ago)
Fail2Ban: repeated malicious HTTP requests (path probing / exploit attempts) against a public web se ...
show more
Fail2Ban: repeated malicious HTTP requests (path probing / exploit attempts) against a public web server.
show less
Web App Attack
Bad Web Bot
Anonymous
2026-09-05 10:23:52
(2 days ago)
Fail2Ban: repeated malicious HTTP requests (path probing / exploit attempts) against a public web se ...
show more
Fail2Ban: repeated malicious HTTP requests (path probing / exploit attempts) against a public web server.
show less
Web App Attack
Bad Web Bot
🇬🇷
setupgr
2026-09-05 00:12:34
(3 days ago)
(mod_security) mod_security (id:11000011) triggered by 34.174.242.61 (US/United States/Texas/Dallas/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.174.242.61 (US/United States/Texas/Dallas/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Sep 05 03:12:32.470814 2026] [security2:error] [pid 2813:tid 2990] [client 34.174.242.61:60958] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 61.242.174.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "mail.adoro.gr"] [uri "/wordpress/"] [unique_id "aptecPbv0TWyF0qRwl_A3gAAAJY"]
show less
Port Scan
🇺🇸
Mundo Bueno
2026-09-05 00:11:16
(3 days ago)
[ISILIA Protection v2.1] Tentative d'accès: /backup/ | Pays: US | UA: Mozilla/5.0 (Linux; Android 11 ...
show more
[ISILIA Protection v2.1] Tentative d'accès: /backup/ | Pays: US | UA: Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.9
show less
Hacking
Web App Attack
🇫🇮
Some Body
2026-09-04 23:16:09
(3 days ago)
Aggressive web scan
Brute-Force
Web App Attack
🇦🇺
aranguren.org
2026-09-04 23:06:52
(3 days ago)
34.174.242.61 - - [05/Sep/2026:09:06:49 +1000] "HEAD /wordpress/ HTTP/2.0" 403 998 "http://mail.aran ...
show more
34.174.242.61 - - [05/Sep/2026:09:06:49 +1000] "HEAD /wordpress/ HTTP/2.0" 403 998 "http://mail.aranguren.org/wordpress/" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36"
34.174.242.61 - - [05/Sep/2026:09:06:50 +1000] "HEAD /backup/ HTTP/2.0" 403 998 "http://mail.aranguren.org/backup/" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36"
34.174.242.61 - - [05/Sep/2026:09:06:50 +1000] "HEAD /wp/ HTTP/2.0" 403 998 "http://mail.aranguren.org/wp/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
34.174.242.61 - - [05/Sep/2026:09:06:50 +1000] "HEAD /old/ HTTP/2.0" 403 998 "http://mail.aranguren.org/old/" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36"
34.174.242.61 - - [05/Sep/2026:09:06:51 +1000] "HEAD /blog/ HTTP/2.0" 403 998 "h
...
show less
Bad Web Bot
🇺🇸
mnsf
2026-09-04 23:06:03
(3 days ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇬🇧
myintarweb
2026-09-04 22:48:03
(3 days ago)
34.174.242.61 - - [04/Sep/2026:23:48:02 +0100] 80 "HEAD /wp/ HTTP/1.1" 301 1241 "-" "Mozilla/5.0 (iP ...
show more
34.174.242.61 - - [04/Sep/2026:23:48:02 +0100] 80 "HEAD /wp/ HTTP/1.1" 301 1241 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Carltonfsck
2026-09-04 22:40:20
(3 days ago)
34.174.242.61 - - [04/Sep/2026:22:40:18 +0000] "HEAD /wordpress/ HTTP/1.1" 404 -
34.174.242.61 - - [ ...
show more
34.174.242.61 - - [04/Sep/2026:22:40:18 +0000] "HEAD /wordpress/ HTTP/1.1" 404 -
34.174.242.61 - - [04/Sep/2026:22:40:18 +0000] "HEAD /backup/ HTTP/1.1" 404 -
34.174.242.61 - - [04/Sep/2026:22:40:18 +0000] "HEAD /wp/ HTTP/1.1" 404 -
...
show less
Hacking
Web App Attack
🇺🇸
dot.mg
2026-09-04 22:31:02
(3 days ago)
Bad behaviour
Web Spam
🇩🇪
FeG Deutschland
2026-09-04 22:24:36
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇬🇷
setupgr
2026-09-04 22:16:34
(3 days ago)
(mod_security) mod_security (id:11000011) triggered by 34.174.242.61 (US/United States/Texas/Dallas/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.174.242.61 (US/United States/Texas/Dallas/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Sep 05 01:16:29.625637 2026] [security2:error] [pid 3681:tid 3820] [client 34.174.242.61:40664] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 61.242.174.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "mail.asteriassantorini.com"] [uri "/wordpress/"] [unique_id "aptDPWBlMaSljN9C3CI7xAAABI0"]
show less
Port Scan
🇺🇸
dot.mg
2026-09-04 20:58:23
(3 days ago)
Bruteforce
Bad Web Bot
🇩🇪
Vegascosmetics
2026-09-04 20:56:36
(3 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after admin/path reconnaissance / port-scan ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after admin/path reconnaissance / port-scan-like web scan. Evidence: AttackPattern: /backup/ (Match: /backup/)
show less
Port Scan
Hacking
Web App Attack
🇳🇱
BlueWire Hosting
2026-09-04 20:21:30
(3 days ago)
Aggressive scanning resulting into 404
Bad Web Bot