🇬🇧
gigatech
2026-11-12 11:10:03
UTC ·
(18 hours ago)
Webserver Probing
Web App Attack
🇺🇸
kosada.com
2026-11-11 12:54:24
UTC ·
(1 day ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=39&topics%5B3%5D=69&topics%5B4%5D=64&topics%5B5%5D=53 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=39&topics%5B3%5D=69&topics%5B4%5D=64&topics%5B5%5D=53 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47")
show less
DDoS Attack
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-06 08:31:36
UTC ·
(6 days ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T08:31:36Z.
Bad Web Bot
🇲🇽
octageeks.com
2026-11-06 05:18:45
UTC ·
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 13:49:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.26.246.29 (103.26.246.29.summitiig.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 08:49:28.571619 2026] [security2:error] [pid 22170:tid 22170] [cli ...
show more
(mod_security) mod_security (id:225170) triggered by 103.26.246.29 (103.26.246.29.summitiig.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 08:49:28.571619 2026] [security2:error] [pid 22170:tid 22170] [client 103.26.246.29:48912] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||annropp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "annropp.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "aus36J37q-5SgV5R1p80pQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
solution.it
2026-11-03 07:29:57
UTC ·
(1 week ago)
[Tue Nov 03 08:29:56.697044 2026] [php:error] [pid 1986149:tid 1986149] [client 103.26.246.29:54124] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat, referer: https://solution.it/wp-login.php
Web App Attack
🇩🇪
big-cloud.nl
2026-11-01 17:22:02
UTC ·
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 14:17:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 103.26.246.29 (103.26.246.29.summitiig.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 10:17:27.741629 2026] [security2:error] [pid 4707:tid 4707] [clien ...
show more
(mod_security) mod_security (id:225170) triggered by 103.26.246.29 (103.26.246.29.summitiig.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 10:17:27.741629 2026] [security2:error] [pid 4707:tid 4707] [client 103.26.246.29:57862] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kmelson.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kmelson.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at9g9yX3Qw_RLe_EWX5ZzwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 09:02:53
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 103.26.246.29 (103.26.246.29.summitiig.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:02:45.399402 2026] [security2:error] [pid 29258:tid 29258] [cli ...
show more
(mod_security) mod_security (id:225170) triggered by 103.26.246.29 (103.26.246.29.summitiig.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:02:45.399402 2026] [security2:error] [pid 29258:tid 29258] [client 103.26.246.29:33129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||magacine.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "magacine.tv"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atx0NcpHAK6yYt5_znfoLAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
bmino.pl
2026-10-23 18:28:29
UTC ·
(2 weeks ago)
Autoban IP(2): 103.26.246.29 - Hostname: SCL IIG Network - City: Narayanganj - Country: Bangladesh - Organization: AS58717 Summit Communications Ltd - Reason: GET /?g=pmv283lmo27889gqiuyisxqt HTTP/1.1
Web App Attack
🇩🇪
Grossmann-Gruppe
2026-10-22 12:18:42
UTC ·
(3 weeks ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-10-22 04:29:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 103.26.246.29 (103.26.246.29.summitiig.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:29:23.632060 2026] [security2:error] [pid 802:tid 802] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 103.26.246.29 (103.26.246.29.summitiig.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:29:23.632060 2026] [security2:error] [pid 802:tid 802] [client 103.26.246.29:47044] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ciptaconindotara.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ciptaconindotara.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atmRI20pMLJDJzW5LMWn2gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-21 05:48:45
UTC ·
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇺🇸
kosada.com
2026-10-20 13:30:51
UTC ·
(3 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=29&topics%5B2%5D=53&topics%5B3%5D=43&topics%5B4%5D=33 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=29&topics%5B2%5D=53&topics%5B3%5D=43&topics%5B4%5D=33 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15")
show less
DDoS Attack
Bad Web Bot
🇫🇷
LRob
2026-10-19 12:36:59
UTC ·
(3 weeks ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Bad Web Bot
