2026-06-22 22:03:38
(3 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Malicious User-Agent
show less
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-06-22 09:41:32
(15 hours ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
2026-06-21 21:05:06
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Malicious User-Agent
show less
Bad Web Bot
Web App Attack
2026-06-21 21:04:42
(1 day ago)
Fail2Ban Log Report 8.230.98.179 - - [21/Jun/2026:23:04:39 +0200] "GET /new/ HTTP/2.0" 404 1823 "htt ...
show more
Fail2Ban Log Report 8.230.98.179 - - [21/Jun/2026:23:04:39 +0200] "GET /new/ HTTP/2.0" 404 1823 "https://cvazquez.es/new/" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" "8.230.98.179"
8.230.98.179 - [21/Jun/2026:23:04:39 +0200] "GET /new/ HTTP/2.0" 404 1823 "https://cvazquez.es/new/" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" "2.51" "8.230.98.179"
8.230.98.179 - - [21/Jun/2026:23:04:40 +0200] "GET /blog/ HTTP/2.0" 404 1823 "https://cvazquez.es/blog/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "8.230.98.179"
8.230.98.179 - [21/Jun/2026:23:04:40 +0200] "GET /blog/ HTTP/2.0" 404 1823 "https://cvazquez.es/blog/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "2.51" "8.230.98.179"
...
show less
Hacking
Brute-Force
Web App Attack
🇩🇪
Trueforce Threat Report
2026-06-21 21:01:18
(1 day ago)
Automated report, trolling for resource vulnerabilities
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-06-21 20:48:18
(1 day ago)
Probing for /backup
8.230.98.179 - - [21/Jun/2026:22:48:16 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "ht ...
show more
Probing for /backup
8.230.98.179 - - [21/Jun/2026:22:48:16 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "https://*REDACTED*/backup/" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36"
show less
Web App Attack
🇺🇸
technojoe99
2026-06-21 20:30:58
(1 day ago)
Exploit scan from 8.230.98.179. HEAD /wp/ HTTP/1.1.
Web App Attack
2026-06-21 20:12:14
(1 day ago)
Suspicious activity detected in web server access logs
Web App Attack
🇪🇸
pipeline.es
2026-06-21 19:48:18
(1 day ago)
Web scanning / probing for vulnerable paths | URL: /backup/ | Evidence: microsites.grupoeuropa.com 8 ...
show more
Web scanning / probing for vulnerable paths | URL: /backup/ | Evidence: microsites.grupoeuropa.com 8.230.98.179 - - [21/Jun/2026:21:47:12 +0200] \"HEAD /backup/ HTTP/1.1\" 404 - \"http://cottontravel.grupoeuropaviajes.es/backup/\" \"Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇨🇦
polycoda
2026-06-21 18:47:32
(1 day ago)
📂 Probes for tons of inexistent directory listings
Hacking
Web App Attack
2026-06-21 18:33:02
(1 day ago)
Unauthorized access (80/tcp/http)
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 18:15:02
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 8.230.98.179 (179.98.230.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 8.230.98.179 (179.98.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 14:14:53.699687 2026] [security2:error] [pid 22386:tid 22386] [client 8.230.98.179:46284] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.azcrittergetter.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.azcrittergetter.com"] [uri "/csfitz.com"] [unique_id "ajgqHfAPWE6yt_0C2ich-AAAAAw"], referer: http://csfitz.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-21 18:05:42
(1 day ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇬🇷
setupgr
2026-06-21 17:57:55
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 8.230.98.179 (US/United States/Texas/Dallas/- ...
show more
(mod_security) mod_security (id:11000011) triggered by 8.230.98.179 (US/United States/Texas/Dallas/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 21 20:57:55.311790 2026] [security2:error] [pid 1109116:tid 1109300] [client 8.230.98.179:41324] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 179.98.230.8.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "cpanagiotou.gr"] [uri "/wp/"] [unique_id "ajgmI_IwSQbLf--96_KFHgAAAJQ"]
show less
Port Scan
🇩🇪
FeG Deutschland
2026-06-21 17:55:03
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack