🇲🇾
Rizzy
2026-09-15 18:19:08
(17 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2026-09-15 17:43:35
(17 hours ago)
DEAGICO WEBEXPLOIT 98.130.91.119 (ec2-98-130-91-119.ap-south-2.compute.amazonaws.com)
Web App Attack
2026-09-15 14:00:27
(21 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
2026-09-15 12:51:32
(22 hours ago)
WAPPICOM WEBEXPLOIT 98.130.91.119 (ec2-98-130-91-119.ap-south-2.compute.amazonaws.com)
Web App Attack
🇩🇪
Bedios GmbH
2026-09-15 12:25:06
(23 hours ago)
Wordpress hacking attempt
Web App Attack
🇩🇪
FeG Deutschland
2026-09-15 11:59:43
(23 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 11:49:27
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 98.130.91.119 (ec2-98-130-91-119.ap-south-2.com ...
show more
(mod_security) mod_security (id:210492) triggered by 98.130.91.119 (ec2-98-130-91-119.ap-south-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:49:23.120255 2026] [security2:error] [pid 4702:tid 4796] [client 98.130.91.119:41374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rubenluis.com"] [uri "/wp-config.php.bak"] [unique_id "aqkww5ShTdG5MG5Zkse1kAAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
slay3r9903
2026-09-15 09:35:45
(1 day ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot
🇺🇸
TAY
2026-09-15 08:34:28
(1 day ago)
98.130.91.119 - - [15/Sep/2026:16:34:06 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 55949 "-" "Mozi ...
show more
98.130.91.119 - - [15/Sep/2026:16:34:06 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 55949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
98.130.91.119 - - [15/Sep/2026:16:34:07 +0800] "GET /wp-config.php~ HTTP/1.1" 404 55949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
98.130.91.119 - - [15/Sep/2026:16:34:09 +0800] "GET /wp-config.php.save HTTP/1.1" 404 55927 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
98.130.91.119 - - [15/Sep/2026:16:34:11 +0800] "GET /wp-config.php.old HTTP/1.1" 404 55949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
98.130.91.119 - - [15/Sep/2026:16:34:12 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 55949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
...
show less
Brute-Force
🇺🇸
Rip
2026-09-15 06:12:37
(1 day ago)
WordPress fingerprinting and attack surface probing
Port Scan
Web App Attack
🇺🇸
LotPhantom
2026-09-15 05:59:06
(1 day ago)
2026-09-15T05:59:04.945112+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ...
show more
2026-09-15T05:59:04.945112+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=98.130.91.119 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=54374 DF PROTO=TCP SPT=59912 DPT=3000 WINDOW=62727 RES=0x00 SYN URGP=0
2026-09-15T05:59:05.962657+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=98.130.91.119 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=54375 DF PROTO=TCP SPT=59912 DPT=3000 WINDOW=62727 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking
🇬🇧
consul.to
2026-09-15 05:49:26
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Alt255
2026-09-15 03:19:49
(1 day ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 98.130.91.119 - - [15/Sep/2026:05:19:47 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 23792 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-09-15 01:26:09
(1 day ago)
Domain : m-powerenterprises.com
Rule : hack
2026-09-15 01:24:05 ***hidden-privacy***46 GET /wp-confi ...
show more
Domain : m-powerenterprises.com
Rule : hack
2026-09-15 01:24:05 ***hidden-privacy***46 GET /wp-config.php.bak - 80 - 98.130.91.119 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 - m-powerenterprises.com 404 0 0 17819 260 1266 - -
show less
Hacking
SQL Injection
Brute-Force
2026-09-14 20:53:43
(1 day ago)
GET /.env HTTP/1.1
...
Web App Attack