2025-06-23 06:48:45
(11 months ago)
AndroxGh0st.Malware
Web App Attack
🇬🇧
www.elivecd.org
2025-06-19 02:32:53
(11 months ago)
95.173.217.65 - - [19/Jun/2025:03:32:53 +0100] "GET /Main/News/?reflect_699_month=11&reflect_699 ...
show more
95.173.217.65 - - [19/Jun/2025:03:32:53 +0100] "GET /Main/News/?reflect_699_month=11&reflect_699_year=2011&reflect_699_day=false&reflect_699_start=0&reflect_494_year=2011&reflect_494_month=false&reflect_494_day=false&reflect_494_start=0&reflect_474_month=7&reflect_474_year=2008&reflect_474_day=false&reflect_474_start=0&start=48&reflect_790_month=3&reflect_790_year=2013&reflect_790_day=false&reflect_790_start=0 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0"
...
show less
DDoS Attack
🇩🇪
botreporter
2025-06-17 09:12:34
(11 months ago)
botnet ignoring robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2025-06-14 11:08:14
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 95.173.217.65 (unn-95-173-217-65.datapacket.com ...
show more
(mod_security) mod_security (id:210492) triggered by 95.173.217.65 (unn-95-173-217-65.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 07:08:06.795835 2025] [security2:error] [pid 99479:tid 99479] [client 95.173.217.65:3605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jewersmail.com.crazycoin.net"] [uri "/.env"] [unique_id "aE1YFiffsSufecyJIgYJnQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-06-09 05:27:54
(1 year ago)
09-06-2025 07:27:53.6 ERROR util.AccessViolations - 95.173.217.65 report to fail2ban - action: block ...
show more
09-06-2025 07:27:53.6 ERROR util.AccessViolations - 95.173.217.65 report to fail2ban - action: block
...
show less
Hacking
Brute-Force
Bad Web Bot
🇦🇺
MAGIC
2025-06-08 17:03:27
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2025-06-05 03:58:22
(1 year ago)
05-06-2025 05:58:22.6 ERROR util.AccessViolations - 95.173.217.65 report to fail2ban - action: block ...
show more
05-06-2025 05:58:22.6 ERROR util.AccessViolations - 95.173.217.65 report to fail2ban - action: block
...
show less
Hacking
Brute-Force
Bad Web Bot
🇺🇸
Bro Charlie
2025-06-04 21:22:03
(1 year ago)
2025-06-05T05:21:57.606754+08:00 localhost sshd[918516]: pam_unix(sshd:auth): authentication failure ...
show more
2025-06-05T05:21:57.606754+08:00 localhost sshd[918516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.173.217.65 user=root
2025-06-05T05:21:59.589394+08:00 localhost sshd[918516]: Failed password for root from 95.173.217.65 port 13996 ssh2
...
show less
Brute-Force
SSH
2025-06-01 00:59:08
(1 year ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.06.01 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.06.01 is noted in report timestamp
show less
Hacking
Brute-Force
2025-05-31 17:00:14
(1 year ago)
Attempted brute force login to web vpn 6 time(s); last attempt for 2025.05.31 is noted in report tim ...
show more
Attempted brute force login to web vpn 6 time(s); last attempt for 2025.05.31 is noted in report timestamp
show less
Hacking
Brute-Force
🇪🇸
iaph.es
2025-05-26 05:10:09
(1 year ago)
DDoS attack directed to a service
DDoS Attack
2025-05-20 22:37:53
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.05.20 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.05.20 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-05-16 13:38:07
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 95.173.217.65 (unn-95-173-217-65.datapacket.com ...
show more
(mod_security) mod_security (id:225170) triggered by 95.173.217.65 (unn-95-173-217-65.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 16 09:38:01.602027 2025] [security2:error] [pid 1331172:tid 1331172] [client 95.173.217.65:31793] [client 95.173.217.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||daisydoesoap.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daisydoesoap.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCc_uVfcekF4Cdv7RxpjRwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-05-16 08:22:05
(1 year ago)
XMLRPC Hack Attempts
Hacking
Brute-Force
🇪🇸
librebit
2025-05-05 21:00:47
(1 year ago)
Brute force
Brute-Force