🇦🇺
Block Rockin' Beats
2026-02-19 05:01:04
(3 months ago)
Scanning forum with forged referal
Hacking
Web App Attack
🇺🇸
canine.tools
2026-02-08 06:49:59
(3 months ago)
[fail2ban Auto Report] {"time":"2026-02-08T01:49:59.502823365-05:00","level":"INFO","source":{"funct ...
show more
[fail2ban Auto Report] {"time":"2026-02-08T01:49:59.502823365-05:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/home/xe/code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"4get.canine.tools","method":"GET","path":"/web","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0","accept_language":"ja-ja;ja;en-US,en","priority":"","x-forwarded-for":"47.79.145.29","x-real-ip":"47.79.145.29","host":"4get.canine.tools","check_result":{"name":"bot/alibaba-cloud","rule":"DENY","weight":0}}
...
show less
Bad Web Bot
🇮🇹
Progetto1
2026-02-03 20:00:02
(4 months ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
🇮🇹
VHosting
2026-02-01 21:17:23
(4 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇵🇱
mscode.pl
2025-12-11 21:02:31
(5 months ago)
Triggered Cloudflare WAF (l7ddos) from JP.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoin ...
show more
Triggered Cloudflare WAF (l7ddos) from JP.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-10 17:55:43
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 47.79.145.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 47.79.145.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 12:55:04.036447 2025] [security2:error] [pid 19930:tid 19930] [client 47.79.145.29:32862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quintessence.com"] [uri "/.git/config"] [unique_id "aTmz-P1v1mQsB2PUn3PESgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 06:12:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 47.79.145.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 47.79.145.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 01:11:58.556526 2025] [security2:error] [pid 12005:tid 12005] [client 47.79.145.29:36216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memotronic.com"] [uri "/.env"] [unique_id "aTe9rns8PUVjvjo3IZOR1AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
PTnet
2025-12-09 00:49:40
(5 months ago)
DDoS Attack (jail:haproxy-https-flood)
DDoS Attack
Exploited Host
🇵🇹
PTnet
2025-12-09 00:48:38
(5 months ago)
DDoS Attack (jail:haproxy-https-flood)
DDoS Attack
Exploited Host
🇵🇹
PTnet
2025-12-09 00:40:41
(5 months ago)
DDoS Attack (jail:haproxy-badreq)
DDoS Attack
Exploited Host
🇺🇸
TPI-Abuse
2025-12-08 05:14:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 47.79.145.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 47.79.145.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 00:14:16.953748 2025] [security2:error] [pid 25987:tid 26002] [client 47.79.145.29:41634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vaprivatecollection.com"] [uri "/.env.production"] [unique_id "aTZeqIQmJhAYiaONxWzu1AAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
COMPLEX
2025-12-05 04:28:25
(6 months ago)
Triggered Cloudflare WAF (l7ddos) from JP.
Action taken: BLOCK
ASN: 45102 (ALIBABA-CN-NET Alibaba US ...
show more
Triggered Cloudflare WAF (l7ddos) from JP.
Action taken: BLOCK
ASN: 45102 (ALIBABA-CN-NET Alibaba US Technology Co., Ltd.)
Protocol: HTTP/2 (GET method)
Endpoint: /
show less
DDoS Attack
Bad Web Bot
2025-12-04 07:36:25
(6 months ago)
botnet
DDoS Attack
🇩🇪
Packets-Decreaser.NET
2025-12-03 05:08:16
(6 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam