🇩🇪
LRob
2025-06-05 00:02:05
UTC ·
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇺🇸
TPI-Abuse
2025-06-04 16:40:29
UTC ·
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 40.69.71.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 12:40:22.827197 2025] [security2:error] [pid 3122080:tid 3122084] [client 40.69.71.13:3703] Mo ...
show more
(mod_security) mod_security (id:240000) triggered by 40.69.71.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 12:40:22.827197 2025] [security2:error] [pid 3122080:tid 3122084] [client 40.69.71.13:3703] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||rolavincent.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "rolavincent.com"] [uri "/images/stories/admin-post.php"] [unique_id "aEB29s4PAYI6fAz7xC_rRQAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-06-04 16:14:25
UTC ·
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇧🇷
leolemos
2025-06-04 16:04:46
UTC ·
(1 year ago)
[Wed Jun 04 12:59:39.973686 2025] [proxy_fcgi:error] [pid 1693131:tid 249563763896512] [client 40.69.71.13:0] AH01071: Got error 'Primary script unknown'
[Wed Jun 04 13:02:31.582364 2025] [proxy_fcgi:error] [pid 1693131:tid 249563721625792] [client 4 ...
show more
[Wed Jun 04 12:59:39.973686 2025] [proxy_fcgi:error] [pid 1693131:tid 249563763896512] [client 40.69.71.13:0] AH01071: Got error 'Primary script unknown'
[Wed Jun 04 13:02:31.582364 2025] [proxy_fcgi:error] [pid 1693131:tid 249563721625792] [client 40.69.71.13:0] AH01071: Got error 'Primary script unknown'
[Wed Jun 04 13:04:45.803098 2025] [proxy_fcgi:error] [pid 1693131:tid 249563520299200] [client 40.69.71.13:0] AH01071: Got error 'Primary script unknown'
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-06-04 13:52:00
UTC ·
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 40.69.71.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 09:51:44.603528 2025] [security2:error] [pid 1830030:tid 1830030] [client 40.69.71.13:1740] Mo ...
show more
(mod_security) mod_security (id:240000) triggered by 40.69.71.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 09:51:44.603528 2025] [security2:error] [pid 1830030:tid 1830030] [client 40.69.71.13:1740] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||ckelectricri.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "ckelectricri.com"] [uri "/images/stories/admin-post.php"] [unique_id "aEBPcKwy3poGtVq6-yCq_QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-06-04 13:21:23
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇬🇧
Spidrweb.co.uk
2025-06-04 11:30:39
UTC ·
(1 year ago)
Brute-Force WordPress attack (85.155)
Web App Attack
🇩🇪
joetaylor.dev
2025-06-04 10:22:59
UTC ·
(1 year ago)
[Wed Jun 04 11:22:20.807170 2025] [authz_core:error] [pid 1469556:tid 137374650599104] [client 40.69.71.13:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/fm.php
[Wed Jun 04 11:22:21.111582 2025] [authz_core:err ...
show more
[Wed Jun 04 11:22:20.807170 2025] [authz_core:error] [pid 1469556:tid 137374650599104] [client 40.69.71.13:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/fm.php
[Wed Jun 04 11:22:21.111582 2025] [authz_core:error] [pid 1469556:tid 137374258431680] [client 40.69.71.13:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/ini.php
[Wed Jun 04 11:22:21.996642 2025] [authz_core:error] [pid 1469534:tid 137374593976000] [client 40.69.71.13:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/alfa.php
[Wed Jun 04 11:22:22.080009 2025] [authz_core:error] [pid 1469556:tid 137374640113344] [client 40.69.71.13:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/wp-mail.php
[Wed Jun 04 11:22:22.696196 2025] [authz_core:error] [pid 1469556:tid 137374629627584] [client 40.69.71.13:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/htt
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-06-04 10:05:22
UTC ·
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 40.69.71.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 06:05:14.638141 2025] [security2:error] [pid 1842363:tid 1842367] [client 40.69.71.13:13555] M ...
show more
(mod_security) mod_security (id:240000) triggered by 40.69.71.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 06:05:14.638141 2025] [security2:error] [pid 1842363:tid 1842367] [client 40.69.71.13:13555] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||2020comeback.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "2020comeback.com"] [uri "/images/stories/admin-post.php"] [unique_id "aEAaWndBTVPDm91SGrqpRwAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2025-06-04 09:45:18
UTC ·
(1 year ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
akasolutions.de
2025-06-04 08:56:28
UTC ·
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 40.69.71.13 (IE/Ireland/-)
SQL Injection
Anonymous
2025-06-04 07:34:39
UTC ·
(1 year ago)
(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 40.69.71.13 (IE/Ireland/-)
Brute-Force
🇵🇱
strefapi_com
2025-06-04 05:39:26
UTC ·
(1 year ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
Anonymous
2025-06-04 04:40:11
UTC ·
(1 year ago)
Bot / seems abusive / Apache connections: 34
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2025-06-04 04:19:11
UTC ·
(1 year ago)
Web App Attack
Web App Attack