π³π±
e.fierstra
2026-05-13 13:51:56
(3 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
π©πͺ
check-the-sum.fr
2026-05-13 13:04:34
(3 weeks ago)
Port Scanning
Port Scan
π©πͺ
Progetto1
2026-05-13 12:59:02
(3 weeks ago)
Detected via HAProxyScanner at 2026-05-13 12:59:01 UTC on destination port WEB (80/443). Repeated sc ...
show more
Detected via HAProxyScanner at 2026-05-13 12:59:01 UTC on destination port WEB (80/443). Repeated scan / connection.
show less
Port Scan
Hacking
Brute-Force
π―π΅
Kinsei Engineering Inc.
2026-05-13 12:58:04
(3 weeks ago)
UFW:High-frequency access to non-released ports used by software with known vulnerabilities.
Port Scan
π¦πΉ
Pingger Shikkoken
2026-05-13 12:42:32
(3 weeks ago)
2026-05-13T12:42:32+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-05-13T12:42:32+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=88.151.33.25 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=15566 DF PROTO=TCP SPT=53266 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-13T12:42:32+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=88.151.33.25 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=2429 DF PROTO=TCP SPT=37232 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-13T12:42:33+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=88.151.33.25 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=2430 DF PROTO=TCP SPT=37232 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
π©πͺ
dbmwebdesign
2026-05-12 18:26:46
(3 weeks ago)
Bot detected and blocked by Fail2Ban in bytespider jail
Bad Web Bot
π©πͺ
Hazzard
2026-05-12 17:20:06
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
π©πͺ
FeG Deutschland
2026-05-12 17:03:27
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
πΊπ¦
URAN Publishing Service
2026-05-12 16:14:19
(3 weeks ago)
88.151.33.25 - - [12/May/2026:19:14:16 +0300] "GET /.env HTTP/1.1" 404 3279 "-" "Mozilla/5.0 (Window ...
show more
88.151.33.25 - - [12/May/2026:19:14:16 +0300] "GET /.env HTTP/1.1" 404 3279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0"
...
show less
Web App Attack
Anonymous
2026-05-12 16:09:58
(3 weeks ago)
Aggressive web scan
Web App Attack
π©πͺ
iNetWorker
2026-05-12 14:52:05
(3 weeks ago)
trolling for resource vulnerabilities
Web App Attack
π«π·
masterguru
2026-05-12 14:13:27
(3 weeks ago)
BAD BOT - Detected and Blocked.. Matched phrase "yandex" at REQUEST_HEADERS:User-Agent. (1100000-193 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "yandex" at REQUEST_HEADERS:User-Agent. (1100000-193)
show less
Bad Web Bot
π©πͺ
mr.joecat
2026-05-12 07:37:26
(3 weeks ago)
88.151.33.25 - - [12/May/2026:09:37:16 +0200] "GET /sitemap.xml HTTP/1.1" 404 4183 "http://pihole.mr ...
show more
88.151.33.25 - - [12/May/2026:09:37:16 +0200] "GET /sitemap.xml HTTP/1.1" 404 4183 "http://pihole.mrjoecat.de/sitemap.xml" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
88.151.33.25 - - [12/May/2026:09:37:21 +0200] "GET /robots.txt HTTP/1.1" 404 4235 "http://pihole.mrjoecat.de/robots.txt" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
88.151.33.25 - - [12/May/2026:09:37:25 +0200] "GET /asset-manifest.json HTTP/1.1" 404 4187 "http://pihole.mrjoecat.de/asset-manifest.json" "Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected] )"
88.151.33.25 - - [12/May/2026:09:37:25 +0200] "GET /manifest.json HTTP/1.1" 404 4612 "http://pihole.mrjoecat.de/manifest.json" "Mozilla/5.0 (compatible; GoogleOther; +https://developers.google.com/search/docs/crawling-indexing/overview-google-crawlers)"
88.151.33.25 - - [12/May/2026:09:37:26 +0200] "GET /build-manifest.json HTTP/1.1" 404 3340 "http://pihole.mrjoecat.de/b
...
show less
Web App Attack
πͺπΈ
yvoictra
2026-05-12 07:36:50
(3 weeks ago)
88.151.33.25 - - [12/May/2026:09:36:44 +0200] "GET /sitemap.xml HTTP/1.1" 404 1368 "-" "Mozilla/5.0 ...
show more
88.151.33.25 - - [12/May/2026:09:36:44 +0200] "GET /sitemap.xml HTTP/1.1" 404 1368 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
88.151.33.25 - - [12/May/2026:09:36:44 +0200] "GET /robots.txt HTTP/1.1" 404 1368 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
88.151.33.25 - - [12/May/2026:09:36:45 +0200] "GET /asset-manifest.json HTTP/1.1" 404 1368 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
88.151.33.25 - - [12/May/2026:09:36:47 +0200] "GET /manifest.json HTTP/1.1" 404 1368 "-" "Mozilla/5.0 (compatible; GoogleOther; +https://developers.google.com/search/docs/crawling-indexing/overview-google-crawlers)"
88.151.33.25 - - [12/May/2026:09:36:49 +0200] "GET /build-manifest.json HTTP/1.1" 404 1368 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://about.you.com/youbot/)"
...
show less
Brute-Force
Web App Attack
πͺπΈ
Francisco Vallejo
2026-05-12 07:33:56
(3 weeks ago)
[Tue May 12 09:33:51.182857 2026] [authz_core:error] [pid 2517189:tid 130321001453248] [client 88.15 ...
show more
[Tue May 12 09:33:51.182857 2026] [authz_core:error] [pid 2517189:tid 130321001453248] [client 88.151.33.25:39622] AH01630: client denied by server configuration: proxy:http://giedi:8080/, referer: http://piholebck.franvallejo.es
[Tue May 12 09:33:54.736960 2026] [authz_core:error] [pid 2517189:tid 130320649156288] [client 88.151.33.25:39622] AH01630: client denied by server configuration: proxy:http://giedi:8080/.aws/credentials, referer: http://piholebck.franvallejo.es/.aws/credentials
[Tue May 12 09:33:55.329076 2026] [authz_core:error] [pid 2517189:tid 130319835457216] [client 88.151.33.25:39624] AH01630: client denied by server configuration: proxy:http://giedi:8080/application.yml, referer: http://piholebck.franvallejo.es/application.yml
[Tue May 12 09:33:55.917164 2026] [authz_core:error] [pid 2517189:tid 130321009845952] [client 88.151.33.25:39622] AH01630: client denied by server configuration: proxy:http://giedi:8080/.ssh/id_rsa, referer: http://piholebck.franvallejo.es/.ssh/
...
show less
Brute-Force
SSH