🇩🇪
FeG Deutschland
2026-09-19 20:41:26
(15 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇬🇧
gigatech
2026-09-19 19:00:02
(17 hours ago)
Webserver Probing
Web App Attack
🇩🇪
LRob
2026-09-19 15:41:51
(20 hours ago)
Walking a list of paths that do not exist (scanning) | method: POST | path: / (+3 more) | 2026-09-19 ...
show more
Walking a list of paths that do not exist (scanning) | method: POST | path: / (+3 more) | 2026-09-19 15:41 UTC
show less
Port Scan
Web App Attack
🇩🇪
LRob
2026-09-19 11:02:34
(1 day ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: POST | path: / (+3 more) | 2026-09-19 11:02 UTC
show less
Bad Web Bot
🇬🇷
setupgr
2026-09-19 10:35:37
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 45.33.0.77 (US/United States/Texas/Richardson ...
show more
(mod_security) mod_security (id:11000011) triggered by 45.33.0.77 (US/United States/Texas/Richardson/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Sep 19 13:35:35.545653 2026] [security2:error] [pid 473522:tid 473654] [client 45.33.0.77:36544] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "linodeusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 45-33-0-77.ip.linodeusercontent.com"] [severity "CRITICAL"] [hostname "pankoskal.gr"] [uri "/"] [unique_id "aq5ld-_Ud3gjSlXOt7sZvAAAAEk"]
show less
Port Scan
🇬🇧
consul.to
2026-09-19 05:03:47
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇸🇪
vaia.cloud
2026-09-18 23:30:01
(1 day ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-09-17 02:05:03
(3 days ago)
Abuse Detected (82)
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-09-17 00:55:01
(3 days ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-09-16 20:05:17
(3 days ago)
Abuse Detected (71)
Brute-Force
Web App Attack
2026-09-16 12:06:56
(4 days ago)
Web application attack detected.
Web App Attack
🇺🇸
ruusvuu
2026-09-16 07:20:21
(4 days ago)
Automated abuse report: 15 attack/probe requests from Akamai Connected Cloud / US.
Targeted paths: / ...
show more
Automated abuse report: 15 attack/probe requests from Akamai Connected Cloud / US.
Targeted paths: /wp-json/batch/v1, /index.php/wp-json/batch/v1, /index.php.
Sample log lines:
[rulesandprompts] 09/16/2026, 24:20:18 MST | 45.33.0.77 | POST /index.php/wp-json/batch/v1 404 166b 0.590 ms | ref=-
[rulesandprompts] 09/16/2026, 24:20:18 MST | 45.33.0.77 | POST /index.php?rest_route=/batch/v1 404 149b 0.748 ms | ref=-
[rulesandprompts] 09/16/2026, 24:20:18 MST | 45.33.0.77 | POST /index.php 404 149b 0.567 ms | ref=-
Detected by an automated web-server log monitor.
show less
Web App Attack
🇩🇪
thesimonmanuel
2026-09-16 04:03:11
(4 days ago)
2026/09/16 09:33:10 [error] 1957369#1957369: *95925 directory index of "/home/[redacted]/htdocs/[red ...
show more
2026/09/16 09:33:10 [error] 1957369#1957369: *95925 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 45.33.0.77, server: [redacted].com, request: "POST /?rest_route=/batch/v1 HTTP/1.1", host: "[redacted].com"
2026/09/16 09:33:11 [error] 1957368#1957368: *95930 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 45.33.0.77, server: [redacted].com, request: "POST / HTTP/1.1", host: "[redacted].com"
2026/09/16 09:33:11 [error] 1957369#1957369: *95929 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 45.33.0.77, server: [redacted].com, request: "POST / HTTP/1.1", host: "[redacted].com"
show less
Port Scan
Web App Attack
🇺🇸
mnsf
2026-09-15 14:05:18
(4 days ago)
Abuse Detected (59)
Brute-Force
Web App Attack
🇺🇸
ruusvuu
2026-09-15 11:34:10
(5 days ago)
Automated abuse report: 15 attack/probe requests from Akamai Connected Cloud / US.
Targeted paths: / ...
show more
Automated abuse report: 15 attack/probe requests from Akamai Connected Cloud / US.
Targeted paths: /wp-json/batch/v1, /index.php/wp-json/batch/v1, /index.php.
Sample log lines:
[signerauthority] 45.33.0.77 - - [15/Sep/2026:04:34:09 -0700] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 404 5415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G…
[signerauthority] 45.33.0.77 - - [15/Sep/2026:04:34:09 -0700] "POST /wp-json/batch/v1 HTTP/1.1" 404 5422 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Ch…
[signerauthority] 45.33.0.77 - - [15/Sep/2026:04:34:09 -0700] "POST /index.php HTTP/1.1" 404 5415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.…
Detected by an automated web-server log monitor.
show less
Web App Attack