[Sun Apr 05 07:59:36.999695 2026] [security2:error] [pid 700136:tid 140030067570368] [client 91.242. ...
show more[Sun Apr 05 07:59:36.999695 2026] [security2:error] [pid 700136:tid 140030067570368] [client 91.242.73.183:46968] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:^|b[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\\\?@_a-\\\\{]*)?\\\\x5c?u[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\\\?@_a-\\\\{]*)?\\\\x5c?s[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0- ..." at ARGS_NAMES:id. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "3250"] [id "932350"] [msg "Remote Command Execution: Direct Unix Command Execution (No Arguments)"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: id found within ARGS_NAMES:id: id request_line = GET /index.php?option=com_content&view=article&id=121&catid=344 HTTP/2.0 Request URI RAW = /index.php?
...
show less
Email Spam
Hacking
Anonymous
"Failed password for invalid user against VPN Portal"
Brute-Force
Anonymous
Attempted brute force login to web vpn 3 time(s); last attempt for 2026.02.22 is noted in report tim ...
show moreAttempted brute force login to web vpn 3 time(s); last attempt for 2026.02.22 is noted in report timestamp
show less
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.10 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.12.10 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.12.03 is noted in report tim ...
show moreAttempted brute force login to web vpn 4 time(s); last attempt for 2025.12.03 is noted in report timestamp
show less
Credential stuffing detected: 27 failed login attempts targeting 9 unique usernames. Location: US, A ...
show moreCredential stuffing detected: 27 failed login attempts targeting 9 unique usernames. Location: US, ASN: –. Status: Suspicious
show less
Hacking
Anonymous
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
Anonymous
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.18 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.11.18 is noted in report timestamp
show less