🇸🇪
vaia.cloud
2026-11-14 01:55:03
UTC ·
(2 hours ago)
crowdsecurity/CVE-2023-49103
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 00:52:27
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.24.78.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:52:20.015859 2026] [security2:error] [pid 23643:tid 23643] [client 82.24.78.67:33019] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.24.78.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:52:20.015859 2026] [security2:error] [pid 23643:tid 23643] [client 82.24.78.67:33019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.coyotebytes.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "avewxNRhdD9NYfhX4AFC6AAAAAo"], referer: http://coyotenoms.com/app_dev.php/_profiler/open?file=app/config/parameters.yml
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-14 00:41:57
UTC ·
(3 hours ago)
"GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 5954 "/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126 ...
show more
"GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 5954 "/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
show less
Web App Attack
🇧🇷
Halux
2026-11-14 00:04:24
UTC ·
(4 hours ago)
82.24.78.67 Probing protected path or service
Web App Attack
🇩🇪
todix
2026-11-13 23:17:20
UTC ·
(4 hours ago)
"GET /var HTTP/1.1" 404 62332 "/var" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
Web App Attack
🇩🇪
LRob
2026-11-13 21:41:19
UTC ·
(6 hours ago)
Technology fingerprinting | method: GET | path: /app | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36
Port Scan
Web App Attack
🇧🇪
cmbplf
2026-11-13 01:35:57
UTC ·
(1 day ago)
118 requests with url.path *.aws/*
Brute-Force
Bad Web Bot
🇩🇪
maxpower
2026-11-13 00:34:51
UTC ·
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 82.24.78.67 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 82.24.78.67 - - [13/Nov/2026:01:34:48 +0100] "GET /.aws/credentials HTTP/1.1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 82.24.78.67 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 82.24.78.67 - - [13/Nov/2026:01:34:48 +0100] "GET /.aws/credentials HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "-" host=rosamundpikeweb.com
show less
Port Scan
🇸🇪
vaia.cloud
2026-11-12 23:05:08
UTC ·
(1 day ago)
crowdsecurity/CVE-2023-49103
Brute-Force
Web App Attack
🇩🇪
paissangroup
2026-11-12 22:53:37
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇨🇭
Origon
2026-11-12 22:52:43
UTC ·
(1 day ago)
CVE-2023-49103 - IP: 82.24.78.67 - time="2026-11-12T23:52:43+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/CVE-2023-49103 by ip 82.24.78.67 (DE/3320) : 4h ban on Ip 82.24.78.67" module=db
Web App Attack
🇩🇪
Mr-Money
2026-11-12 22:48:26
UTC ·
(1 day ago)
scenario: crowdsecurity/CVE-2023-49103 - events: 1
Hacking
🇳🇱
Alt255
2026-11-12 22:14:38
UTC ·
(1 day ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 82.24.78.67 - - \[12/Nov/2026:23:14:37 +0100\] "GET /phpinfo.php HTTP/1.1" 301 482 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 82.24.78.67 - - \[12/Nov/2026:23:14:37 +0100\] "GET /phpinfo.php HTTP/1.1" 301 482 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/126.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-12 21:17:28
UTC ·
(1 day ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 82.24.78.67 - - [12/Nov/2026:22:17:11 +0100] "GET /.env HTTP/1.1" 301 478 "http://gzdereigers.nl/%2eenv" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 82.24.78.67 - - [12/Nov/2026:22:17:11 +0100] "GET /.env HTTP/1.1" 301 478 "http://gzdereigers.nl/%2eenv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-12 19:43:13
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
