๐ซ๐ท
cityhunter_rhone
2026-04-22 14:34:59
(5 months ago)
Mercurius Guide auto detection | source=Fail2Ban | scraper score=5 | events=1 | decision=datacenter ...
show more
Mercurius Guide auto detection | source=Fail2Ban | scraper score=5 | events=1 | decision=datacenter | actions=fail2ban failed plesk-permanent-ban | last_seen=2026-04-22 16:24:21
show less
Brute-Force
SSH
Web App Attack
๐ณ๐ฑ
larse99
2026-02-19 22:32:28
(7 months ago)
Detected scanning activity
Port Scan
Hacking
๐ฌ๐ง
sincler
2026-02-13 22:14:00
(8 months ago)
69.5.23.113 - - [13/Feb/2026:01:00:26 +0000] "HEAD /_next/data HTTP/1.1" 404 - "-" "Mozilla/5.0 (Win ...
show more
69.5.23.113 - - [13/Feb/2026:01:00:26 +0000] "HEAD /_next/data HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
show less
Web App Attack
๐ณ๐ฑ
oisecnet
2026-02-13 22:01:49
(8 months ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-02-13. 20 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-02-13. 20 requests from this IP.
show less
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
Viveronese
2026-02-13 08:18:41
(8 months ago)
HTTP vulnerability scanning
Web App Attack
๐ณ๐ฑ
ParaBug
2026-02-13 07:19:09
(8 months ago)
69.5.23.113 - - [13/Feb/2026:08:19:09 +0100] "HEAD /api/action HTTP/1.1" 404 201 "-" "Mozilla/5.0 (W ...
show more
69.5.23.113 - - [13/Feb/2026:08:19:09 +0100] "HEAD /api/action HTTP/1.1" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
...
show less
Phishing
Brute-Force
Web App Attack
Anonymous
2026-02-13 07:18:01
(8 months ago)
Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0
show less
Web App Attack
๐ฆ๐บ
Terrier
2026-02-13 07:00:02
(8 months ago)
Blocked for HTTP vulnerability scanning (excessive 40x)
Web App Attack
๐ฉ๐ช
barbarella
2026-02-13 06:25:38
(8 months ago)
Multiple (4) times attack on https port 443: searching for Cobalt Strike server beacon (HEAD /apps) ...
show more
Multiple (4) times attack on https port 443: searching for Cobalt Strike server beacon (HEAD /apps)
06:25:38 illegal attempt to access nonexisting folder (HEAD /api/action)
06:25:39 illegal attempt to access nonexisting folder (HEAD /api/actions)
06:25:39 Illegal http header (POST /)
show less
Hacking
Web App Attack
๐ฌ๐ง
sc user
2026-02-13 05:11:22
(8 months ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Port Scan
Bad Web Bot
Web App Attack
๐ซ๐ฎ
oh.mg
2026-02-13 05:05:45
(8 months ago)
[Fri Feb 13 06:05:44.974608 2026] [security2:error] [pid 2938715:tid 2938730] [client 69.5.23.113:51 ...
show more
[Fri Feb 13 06:05:44.974608 2026] [security2:error] [pid 2938715:tid 2938730] [client 69.5.23.113:51014] [client 69.5.23.113] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.ohno.es"] [uri "/ohnoes"] [unique_id "aY6xKCV8TSpPqJIzQiNXrgAAAA0"]
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
Charlesiv
2026-02-13 05:00:20
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: BLOCK
ASN: 150436 (BYTEPLUS-AS-AP B ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: BLOCK
ASN: 150436 (BYTEPLUS-AS-AP Byteplus Pte. Ltd.)
Protocol: HTTP/1.1 (POST method)
Endpoint: /
Timestamp: 2026-02-13T04:41:56Z
Ray ID: 9cd1a7febd22f900
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0
show less
Bad Web Bot
๐ซ๐ฎ
as211431.net
2026-02-13 04:53:28
(8 months ago)
Triggered Cloudflare WAF (firewallManaged) from ID.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from ID.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /apps
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ณ๐ฑ
Pingger Shikkoken
2026-02-13 04:29:52
(8 months ago)
2026-02-13T04:29:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-02-13T04:29:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=69.5.23.113 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=48 ID=18259 DF PROTO=TCP SPT=39236 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-02-13T04:29:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=69.5.23.113 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=48 ID=18260 DF PROTO=TCP SPT=39236 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-02-13T04:29:55+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=69.5.23.113 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=48 ID=18261 DF PROTO=TCP SPT=39236 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
๐ฎ๐น
eliosbrocchi
2026-02-13 03:33:39
(8 months ago)
[Fri Feb 13 04:33:37.574816 2026] [access_compat:error] [pid 2137374:tid 2137433] [client 69.5.23.11 ...
show more
[Fri Feb 13 04:33:37.574816 2026] [access_compat:error] [pid 2137374:tid 2137433] [client 69.5.23.113:53880] AH01797: client denied by server configuration: /var/www/public_static/contestazioni.crislio.com/
[Fri Feb 13 04:33:37.785824 2026] [access_compat:error] [pid 2137374:tid 2137434] [client 69.5.23.113:53880] AH01797: client denied by server configuration: /var/www/public_static/contestazioni.crislio.com/apps
...
show less
VPN IP