2026-10-06 22:11:52
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇨🇭
m_vlasov
2026-10-06 21:38:36
(1 week ago)
SSH/Telnet honeypot: 0 login attempts, 0 sessions, 0 shell commands.
Hacking
🇦🇺
Scrapline
2026-10-06 20:16:20
(1 week ago)
[Fail2Ban] nginx-scraper: banned after 5 failures
Web App Attack
2026-10-06 19:56:00
(1 week ago)
Automated report (2026-10-07T03:56:00+08:00). Scraper detected.
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-10-06 17:42:16
(1 week ago)
[Wed Oct 07 04:42:16.130814 2026] [security2:error] [pid 263830] [client 35.255.193.73:47632] [clien ...
show more
[Wed Oct 07 04:42:16.130814 2026] [security2:error] [pid 263830] [client 35.255.193.73:47632] [client 35.255.193.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "talentaymerch.com.au"] [uri "/index.php"] [unique_id "asUy-Oq7EimWzEyD0JucPwAAAAU"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-06 15:41:42
(1 week ago)
[Wed Oct 07 02:41:41.654292 2026] [security2:error] [pid 269341] [client 35.255.193.73:53392] [clien ...
show more
[Wed Oct 07 02:41:41.654292 2026] [security2:error] [pid 269341] [client 35.255.193.73:53392] [client 35.255.193.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rjryanpartners.com.au"] [uri "/img../.env"] [unique_id "asUWtaaLKX6THAHiVMUYswAAABQ"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-06 13:52:11
(1 week ago)
[Wed Oct 07 00:52:10.856173 2026] [security2:error] [pid 254090] [client 35.255.193.73:45354] [clien ...
show more
[Wed Oct 07 00:52:10.856173 2026] [security2:error] [pid 254090] [client 35.255.193.73:45354] [client 35.255.193.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/img../.env"] [unique_id "asT9Cr325sxK-ZK9RREsUQAAAAo"]
...
show less
Web App Attack
🇦🇺
AWW-Admin
2026-10-06 13:13:00
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 35.255.193.73 (US/United States/73.193. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.255.193.73 (US/United States/73.193.255.35.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-10-06 12:48:20
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.255.193.73 (73.193.255.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.255.193.73 (73.193.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:48:16.199995 2026] [security2:error] [pid 25484:tid 25484] [client 35.255.193.73:44412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newlife.org.au"] [uri "/static../.env"] [unique_id "asTuEPBMJzKCdonvERXprAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
A.i.D.A.N.N
2026-10-06 12:34:07
(1 week ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
🇦🇺
Asimar
2026-10-06 11:38:49
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-10-06 10:35:18
(1 week ago)
[Tue Oct 06 21:35:17.638805 2026] [security2:error] [pid 241257] [client 35.255.193.73:51316] [clien ...
show more
[Tue Oct 06 21:35:17.638805 2026] [security2:error] [pid 241257] [client 35.255.193.73:51316] [client 35.255.193.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellagiftware.com.au"] [uri "/.ssh/id_rsa"] [unique_id "asTO5ctvJG_eEemAfsekHgAAABA"]
...
show less
Web App Attack
🇦🇺
Klaverstyn
2026-10-06 10:07:27
(1 week ago)
Excessive HTTP request rate
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 09:44:35
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 35.255.193.73 (73.193.255.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.255.193.73 (73.193.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 05:44:30.295601 2026] [security2:error] [pid 27882:tid 27882] [client 35.255.193.73:55854] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||joyflightsunshinecoast.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joyflightsunshinecoast.com.au"] [uri "/server.key"] [unique_id "asTC_tWfCnUxCLBZSD9IJAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-10-06 09:41:07
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
