🇨🇦
zXero
2026-09-26 12:22:01
(3 weeks ago)
Fail2Ban automatic report - jail: recidive
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-09-23 12:41:59
(3 weeks ago)
Fail2Ban automatic report - jail: recidive
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-09-18 12:10:37
(4 weeks ago)
Fail2Ban automatic report - jail: recidive
Brute-Force
SSH
DDoS Attack
🇳🇱
Alt255
2026-09-15 18:02:15
(1 month ago)
[ti-01ov] Excessive 404 errors (web scanning): 50 suspicious requests detected by fail2ban jail <nam ...
show more
[ti-01ov] Excessive 404 errors (web scanning): 50 suspicious requests detected by fail2ban jail <name>. Example: 35.243.247.11 - - [14/Sep/2026:02:33:53 +0200] "GET /api/v1/config HTTP/1.1" 404 2101 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.243.247.11 - - [14/Sep/2026:02:33:53 +0200] "GET /api/v1/settings HTTP/1.1" 404 2101 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.243.247.11 - - [14/Sep/2026:02:33:53 +0200] "GET /api/env HTTP/1.1" 404 7388 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.243.247.11 - - [14/Sep/2026:02:33:53 +0200] "GET /config.json HTTP/1.1" 404 7388 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.243.247.11 - -
...
show less
Bad Web Bot
Web App Attack
🇨🇦
zXero
2026-09-15 02:46:25
(1 month ago)
Fail2Ban automatic report - jail: recidive
Brute-Force
SSH
DDoS Attack
2026-09-14 04:32:39
(1 month ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇫🇷
tecnoacquisti.com
2026-09-13 20:01:59
(1 month ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
🇲🇽
Karina Gomez
2026-09-13 19:22:00
(1 month ago)
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 19:13:47
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.243.247.11 (11.247.243.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.243.247.11 (11.247.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 15:13:41.426006 2026] [security2:error] [pid 5464:tid 5464] [client 35.243.247.11:49496] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||noscentpro.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "noscentpro.com"] [uri "/z9x8c7v6b5-debug-trigger-noscentpro.com"] [unique_id "aqb15fO72gAQ6RJrurasvwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-09-13 19:05:03
(1 month ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 18:11:42
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.243.247.11 (11.247.243.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.247.11 (11.247.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 14:11:36.174341 2026] [security2:error] [pid 26730:tid 26730] [client 35.243.247.11:49426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "norkyn.com"] [uri "/.env"] [unique_id "aqbnWAMyq5EjKTJQ7Y82EQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
abuseiphack
2026-09-13 18:04:00
(1 month ago)
Automatic report for brute force attack
Bad Web Bot
🇩🇰
HostingGroup
2026-09-13 18:01:54
(1 month ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 5. First blocked: 2026-09-13.
show less
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-09-13 17:43:57
(1 month ago)
cloudlinux2 fail2ban: 2026-09-13 19:38:51,909 fail2ban.filter [1591]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-13 19:38:51,909 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.243.247.11 - 2026-09-13 19:38:51cloudlinux2 fail2ban: 2026-09-13 19:38:52,154 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.243.247.11 - 2026-09-13 19:38:52cloudlinux2 fail2ban: 2026-09-13 19:38:51,802 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.243.247.11 - 2026-09-13 19:38:51cloudlinux2 fail2ban: 2026-09-13 19:38:52,184 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.243.247.11 - 2026-09-13 19:38:52cloudlinux2 fail2ban: 2026-09-13 19:38:52,359 fail2ban.filter [1591]: INFO [recidive] Found 35.243.247.11 - 2026-09-13 19:38:52cloudlinux2 fail2ban: 2026-09-13 19:38:52,281 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.243.247.11 - 2026-09-13 19:38:52cloudlinux2 fail2ban: 2026-09-13 19:38:51,810 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.243.247.11 - 2026-09-13 19:38:51clou
show less
Brute-Force
2026-09-13 17:38:35
(1 month ago)
35.243.247.11 - - [14/Sep/2026:01:38:33 +0800] "GET /.env.backup HTTP/1.1" 404 39532 "-" "Mozilla/5. ...
show more
35.243.247.11 - - [14/Sep/2026:01:38:33 +0800] "GET /.env.backup HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Bad Web Bot
Web App Attack