🇷🇺
Mga Admin
2026-10-31 17:03:47
UTC ·
(1 week ago)
85.190.243.59 - - [01/Nov/2026:00:03:46 +0700] "GET /~yurii/courses/ge02-2005/risks.files/image012.gif HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
Web App Attack
🇵🇹
PT
2026-10-12 07:09:53
UTC ·
(4 weeks ago)
web app attack
Bad Web Bot
Exploited Host
Web App Attack
🇮🇹
A000Z
2026-10-09 07:57:31
UTC ·
(1 month ago)
Fail2Ban: 85.190.243.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Bad Web Bot
🇬🇷
setupgr
2026-10-05 03:53:29
UTC ·
(1 month ago)
(mod_security) mod_security (id:11000011) triggered by 85.190.243.59 (DE/Germany/Baden-Wurttemberg/Karlsruhe/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Oct 05 06:53:26.6 ...
show more
(mod_security) mod_security (id:11000011) triggered by 85.190.243.59 (DE/Germany/Baden-Wurttemberg/Karlsruhe/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Oct 05 06:53:26.651129 2026] [security2:error] [pid 2327:tid 2346] [remote 85.190.243.59:37188] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "contaboserver.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vmi3596063.contaboserver.net"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/oak-150x150.jpg"] [unique_id "asMfNrgnEsiMJKkH_rLBqwAAFhE"]
show less
Port Scan
2026-10-03 02:32:32
UTC ·
(1 month ago)
WEB attack
Brute-Force
🇬🇷
setupgr
2026-10-02 18:09:57
UTC ·
(1 month ago)
(mod_security) mod_security (id:11000011) triggered by 85.190.243.59 (DE/Germany/Baden-Wurttemberg/Karlsruhe/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Oct 02 21:09:53.3 ...
show more
(mod_security) mod_security (id:11000011) triggered by 85.190.243.59 (DE/Germany/Baden-Wurttemberg/Karlsruhe/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Oct 02 21:09:53.314078 2026] [security2:error] [pid 2638527:tid 2638546] [remote 85.190.243.59:60246] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "contaboserver.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vmi3596063.contaboserver.net"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/olympus-digital-camera-70-1024x1024.jpg"] [unique_id "ar_zcd6x88WOMws-KtJ-VgAASBI"]
show less
Port Scan
🇩🇪
LRob
2026-09-30 07:19:45
UTC ·
(1 month ago)
Not following 301 redirects — wasted requests | method: GET | path: /design/images/logo/vintech.png | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 | 2026-09-30 07:19 UTC
Bad Web Bot
🇩🇪
LRob
2026-09-28 11:36:37
UTC ·
(1 month ago)
Not following 301 redirects — wasted requests | method: GET | path: /USER/img/produits/739-product.jpg | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 | 2026-09-28 11:36 UTC
Bad Web Bot
🇩🇪
LRob
2026-09-27 14:46:39
UTC ·
(1 month ago)
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /styles/images/logos/ino-telecom-logo.png | 2026-09-27 14:46 UTC
show less
Bad Web Bot
🇫🇷
SpaceHost-Server
2026-09-25 22:26:27
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-09-25 11:51:19
UTC ·
(1 month ago)
2026/09/25 11:51:15 [error] 2896480#2896480: *35020616 access forbidden by rule, client: 85.190.243.59, server: binixo.mx, request: "GET /wp-content/uploads/2018/05/pr%C3%A9stamos-a-universitarios.jpg HTTP/2.0", host: "binixo.mx"
2026/09/25 11:51:17 ...
show more
2026/09/25 11:51:15 [error] 2896480#2896480: *35020616 access forbidden by rule, client: 85.190.243.59, server: binixo.mx, request: "GET /wp-content/uploads/2018/05/pr%C3%A9stamos-a-universitarios.jpg HTTP/2.0", host: "binixo.mx"
2026/09/25 11:51:17 [error] 2896479#2896479: *35020707 access forbidden by rule, client: 85.190.243.59, server: binixo.mx, request: "GET /wp-content/uploads/2018/05/pr%C3%A9stamos-a-universitarios.jpg HTTP/2.0", host: "binixo.mx"
2026/09/25 11:51:18 [error] 2896479#2896479: *35020734 access forbidden by rule, client: 85.190.243.59, server: binixo.mx, request: "GET /wp-content/uploads/2018/05/pr%C3%A9stamos-a-universitarios.jpg HTTP/2.0", host: "binixo.mx"
...
show less
Web App Attack
2026-09-21 23:11:07
UTC ·
(1 month ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
