Anonymous
2026-11-12 00:12:49
UTC ยท
(14 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning
Bad Web Bot
Web App Attack
๐บ๐ธ
wbsouza
2026-11-11 03:48:06
UTC ยท
(1 day ago)
CrowdSec: infra/appsec-challenge-requested-log โ automated firewall drops on self-hosted IDS sensor
Hacking
๐น๐ท
eryilmaz
2026-11-11 02:00:37
UTC ยท
(1 day ago)
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /wordpress
Web App Attack
Hacking
๐น๐ท
Domainhizmetleri.com
2026-11-10 23:47:00
UTC ยท
(1 day ago)
Trying to detecting and hacking a CRM Admin Panel via 443/tcp. Invalid path: /new
Hacking
Web App Attack
๐บ๐ธ
compliance-assurance.com
2026-11-10 23:40:08
UTC ยท
(1 day ago)
HEAD /backup (404 probe)
Bad Web Bot
Web App Attack
๐บ๐ธ
consti.art
2026-11-10 23:32:22
UTC ยท
(1 day ago)
Web vulnerability scanning (1 probes), looking for backup and database dump files
User-Agent: Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari
3 HTTP requests at 2026-11-10 23:32 ...
show more
Web vulnerability scanning (1 probes), looking for backup and database dump files
User-Agent: Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari
3 HTTP requests at 2026-11-10 23:32 UTC
show less
Bad Web Bot
๐ฌ๐ท
setupgr
2026-11-10 23:28:28
UTC ยท
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 34.181.216.242 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Nov 11 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.181.216.242 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:28:26.129334 2026] [security2:error] [pid 1423436:tid 1423576] [client 34.181.216.242:40014] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 242.216.181.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.cpanagiotou.gr"] [uri "/backup"] [unique_id "avOomteY4lNAY08trrgFbgAAA9E"]
show less
Port Scan
๐ซ๐ท
ELYAZ
2026-11-10 22:50:41
UTC ยท
(1 day ago)
(y3) Failed scan -byebye- from 34.181.216.242 (US/United States/242.216.181.34.bc.googleusercontent.com): (CF_ENABLE)
Hacking
๐ซ๐ท
ecodehost.com
2026-11-10 22:48:05
UTC ยท
(1 day ago)
Domain : cozumdoktoru.com
Rule : Method-Head
2026-11-10 22:45:09 10.100.1.20 HEAD /wordpress - 80 - 172.71.190.54 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0 - www.cozumdoktoru.com 404 0 2 251 699 170 - 34.181.216. ...
show more
Domain : cozumdoktoru.com
Rule : Method-Head
2026-11-10 22:45:09 10.100.1.20 HEAD /wordpress - 80 - 172.71.190.54 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0 - www.cozumdoktoru.com 404 0 2 251 699 170 - 34.181.216.242
show less
Port Scan
Anonymous
2026-11-10 22:10:09
UTC ยท
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning
Bad Web Bot
Web App Attack
๐ฉ๐ช
todix
2026-11-10 21:41:48
UTC ยท
(1 day ago)
"HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
Web App Attack
๐ฉ๐ช
todix
2026-11-10 21:06:19
UTC ยท
(1 day ago)
"GET /backup HTTP/1.1" 404 63454 "/backup" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
Web App Attack
๐ช๐ธ
netfactotum
2026-11-10 20:43:49
UTC ยท
(1 day ago)
Hacking
Web App Attack
๐บ๐ธ
epixian
2026-11-10 20:39:04
UTC ยท
(1 day ago)
Rotating user agents (6 different browser user agents from one IP), 7 page requests + 0 asset requests, 14 redirects not followed during scan interval. UA: Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1 ...
show more
Rotating user agents (6 different browser user agents from one IP), 7 page requests + 0 asset requests, 14 redirects not followed during scan interval. UA: Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36
show less
Bad Web Bot
๐ฉ๐ช
AetherFox
2026-11-10 20:30:40
UTC ยท
(1 day ago)
AetherFox VoidGuard detected: [Tue Nov 10 20:30:39.524818 2026] [authz_core:error] [pid 2890455:tid 2890497] [client 34.181.216.242:46862] AH01630: client denied by server configuration: proxy:https://[MASKED]/backup, referer: http://www.dranet.de/ba ...
show more
AetherFox VoidGuard detected: [Tue Nov 10 20:30:39.524818 2026] [authz_core:error] [pid 2890455:tid 2890497] [client 34.181.216.242:46862] AH01630: client denied by server configuration: proxy:https://[MASKED]/backup, referer: http://www.dranet.de/backup
[Tue Nov 10 20:30:39.706955 2026] [authz_core:error] [pid 2890455:tid 2890496] [client 34.181.216.242:46862] AH01630: client denied by server configuration: proxy:https://[MASKED]/, referer: http://www.dranet.de/
[Tue Nov 10 20:30:39.888973 2026] [authz_core:error] [pid 2890455:tid 2890503] [client 34.181.216.242:46862] AH01630: client denied by server configuration: proxy:https://[MASKED]/blog, referer: http://www.dranet.de/blog
[Tue Nov 10 20:30:40.070793 2026] [authz_core:error] [pid 2890455:tid 2890500] [client 34.181.216.242:46862] AH01630: client denied by server configuration: proxy:https://[MASKED]/wordpress, referer: http://www.dranet.de/wordpress
[Tue Nov 10 20:30:40.252698 2026] [authz_core:er
...
show less
Bad Web Bot
Web App Attack