Anonymous
2025-03-15 00:02:51
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ฉ๐ช
Vegascosmetics
2025-03-14 22:52:08
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
๐ณ๐ฑ
Roderic
2025-03-14 21:51:17
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
Anonymous
2025-03-14 16:57:35
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
Anonymous
2025-03-14 15:18:54
(1 year ago)
[Fri Mar 14 16:18:53.585188 2025] [authz_core:error] [pid 13077] [client 74.234.109.245:4324] AH0163 ...
show more
[Fri Mar 14 16:18:53.585188 2025] [authz_core:error] [pid 13077] [client 74.234.109.245:4324] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Mar 14 16:18:53.671171 2025] [authz_core:error] [pid 13077] [client 74.234.109.245:4324] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Mar 14 16:18:53.727229 2025] [authz_core:error] [pid 13077] [client 74.234.109.245:4324] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐บ๐ธ
mnsf
2025-03-14 14:05:58
(1 year ago)
Too many Status 40X (20)
Brute-Force
Web App Attack
๐ง๐ช
white2net.com
2025-03-14 12:52:00
(1 year ago)
multiple attack / blocked by cloudfare, use of HEAD method
DDoS Attack
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐ญ๐บ
DumaNet
2025-03-14 09:36:00
(1 year ago)
Web app attack attempts, scanning for vulnerability.
Date: 2025 Mar 14. 02:24:26
Source IP: 74.234 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2025 Mar 14. 02:24:26
Source IP: 74.234.109.245
Portion of the log(s):
74.234.109.245 - [14/Mar/2025:02:24:25 +0100] "HEAD /old HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - [14/Mar/2025:02:24:25 +0100] "HEAD /backup HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - [14/Mar/2025:02:24:25 +0100] "HEAD /bk HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - [14/Mar/2025:02:24:25 +0100] "HEAD /bc HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - [14/Mar/2025:02:24:25 +0100] "HEAD /wp HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10
show less
Web App Attack
๐ญ๐บ
DumaNet
2025-03-14 09:13:00
(1 year ago)
Web app attack attempts, scanning for vulnerability.
Date: 2025 Mar 13. 16:16:02
Source IP: 74.234 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2025 Mar 13. 16:16:02
Source IP: 74.234.109.245
Portion of the log(s):
74.234.109.245 - [13/Mar/2025:16:16:00 +0100] "HEAD /main HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - [13/Mar/2025:16:16:00 +0100] "HEAD /new HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - [13/Mar/2025:16:16:00 +0100] "HEAD /old HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - [13/Mar/2025:16:16:00 +0100] "HEAD /backup HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - [13/Mar/2025:16:16:00 +0100] "HEAD /bk HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows
show less
Web App Attack
๐ธ๐ช
webbfabriken
2025-03-14 05:08:07
(1 year ago)
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbf ...
show more
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbfabriken Security API - WFSecAPI
show less
Web Spam
Anonymous
2025-03-14 05:04:21
(1 year ago)
[Fri Mar 14 06:04:20.555890 2025] [authz_core:error] [pid 12039] [client 74.234.109.245:5905] AH0163 ...
show more
[Fri Mar 14 06:04:20.555890 2025] [authz_core:error] [pid 12039] [client 74.234.109.245:5905] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Mar 14 06:04:20.604120 2025] [authz_core:error] [pid 12039] [client 74.234.109.245:5905] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Mar 14 06:04:20.648968 2025] [authz_core:error] [pid 12039] [client 74.234.109.245:5905] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฉ๐ช
FeG Deutschland
2025-03-14 04:17:34
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
๐บ๐ธ
octageeks.com
2025-03-14 04:13:13
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
๐ฌ๐ง
Mendip_Defender
2025-03-14 01:32:46
(1 year ago)
74.234.109.245 - - [14/Mar/2025:01:32:40 +0000] "HEAD / HTTP/1.0" 200 1066 "http://wessex4x4response ...
show more
74.234.109.245 - - [14/Mar/2025:01:32:40 +0000] "HEAD / HTTP/1.0" 200 1066 "http://wessex4x4response.org.uk/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - - [14/Mar/2025:01:32:42 +0000] "HEAD /new HTTP/1.0" 301 957 "http://wessex4x4response.org.uk/new" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
74.234.109.245 - - [14/Mar/2025:01:32:43 +0000] "HEAD /news/ HTTP/1.0" 200 1072 "https://www.wessex4x4response.org.uk/new" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
...
show less
Hacking
Web App Attack
Anonymous
2025-03-14 00:00:51
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH