|
🇫🇷
masterguru
|
|
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-193)
|
Bad Web Bot
|
|
🇺🇸
JustMeHere
|
|
[Tue Oct 27 20:01:48.905745 2026] [security2:error] [pid 1318:tid 1370] [client 34.67.121.218:37392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activ ...
show more
[Tue Oct 27 20:01:48.905745 2026] [security2:error] [pid 1318:tid 1370] [client 34.67.121.218:37392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "data.yorknation.com"] [uri "/"] [unique_id "auE7bPKAhjhDyruy3maF1AAAANc"]
...
show less
|
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Scanning for secret files (.env, .git, credentials, config backups)
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
ELYAZ
|
|
(y3) Failed access -byebye- from 34.67.121.218 (US/United States/218.121.67.34.bc.googleusercontent.com): (CF_ENABLE)
|
Hacking
|
|
Anonymous
|
|
[Tue Oct 27 11:43:16.062828 2026] [access_compat:error] [pid 726612:tid 726637] [remote 34.67.121.218:0] AH01797: client denied by server configuration: /var/www/html/nextcloud/config/env
[Tue Oct 27 11:43:16.115459 2026] [access_compat:error] [pid 7 ...
show more
[Tue Oct 27 11:43:16.062828 2026] [access_compat:error] [pid 726612:tid 726637] [remote 34.67.121.218:0] AH01797: client denied by server configuration: /var/www/html/nextcloud/config/env
[Tue Oct 27 11:43:16.115459 2026] [access_compat:error] [pid 726612:tid 726629] [remote 34.67.121.218:0] AH01797: client denied by server configuration: /var/www/html/nextcloud/config/.env.dev
[Tue Oct 27 11:43:16.162591 2026] [access_compat:error] [pid 726612:tid 726655] [remote 34.67.121.218:0] AH01797: client denied by server configuration: /var/www/html/nextcloud/config/.env.local
[Tue Oct 27 11:43:16.183793 2026] [access_compat:error] [pid 726612:tid 726651] [remote 34.67.121.218:0] AH01797: client denied by server configuration: /var/www/html/nextcloud/config/.env.production
[Tue Oct 27 11:43:16.294707 2026] [access_compat:error] [pid 726612:tid 726661] [remote 34.67.121.218:0] AH01797: client denied by server configuration: /var/www/html/nextcloud/config/.env.staging
...
show less
|
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
mnsf
|
|
Too many Status 40X (29)
Scanning/Probing (16)
Request Overload (225)
|
Brute-Force
Web App Attack
|
|
🇺🇸
JustMeHere
|
|
[Mon Oct 26 19:25:07.595091 2026] [security2:error] [pid 44516:tid 44555] [client 34.67.121.218:49106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/act ...
show more
[Mon Oct 26 19:25:07.595091 2026] [security2:error] [pid 44516:tid 44555] [client 34.67.121.218:49106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "odoo.yorknation.com"] [uri "/"] [unique_id "at_hU94TUIGjdpXHJuE9UwAAAQs"]
...
show less
|
Web App Attack
|
|
🇺🇸
JustMeHere
|
|
[Mon Oct 26 15:47:49.616979 2026] [security2:error] [pid 33559:tid 33643] [client 34.67.121.218:57798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/act ...
show more
[Mon Oct 26 15:47:49.616979 2026] [security2:error] [pid 33559:tid 33643] [client 34.67.121.218:57798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vault.yorknation.com"] [uri "/"] [unique_id "at-uZU6mVcRx8LTczonHIAAAAEE"]
...
show less
|
Web App Attack
|
|
🇳🇱
Mangelot Hosting
|
|
(modsec_attack) srv101 ModSecurity attack 34.67.121.218 (US/United States/218.121.67.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
|
Web App Attack
|
|
🇩🇪
heyzg
|
|
HTTP Web Scanning (observed): 477 HTTP, 15s
|
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/grafana-cve-2021-43798
|
Brute-Force
Web App Attack
|
|
🇧🇪
taivas.nl
|
|
Many_bad_calls
|
Web App Attack
|
