🇭🇺
bcsaba
2026-08-30 18:08:14
(2 hours ago)
CMS (WordPress or Joomla) login attempt.
104.207.32.60 - - [30/Aug/2026:20:08:12 +0200] "POST /wp-lo ...
show more
CMS (WordPress or Joomla) login attempt.
104.207.32.60 - - [30/Aug/2026:20:08:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3503 "https://*REDACTED*/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
show less
Hacking
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-08-30 14:55:03
(5 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-08-10 05:31:39
(2 weeks ago)
Web App Attack
Web App Attack
🇺🇸
oncord
2026-05-06 09:33:22
(3 months ago)
Form spam
Web Spam
🇪🇸
librebit
2026-04-10 06:31:59
(4 months ago)
Brute force
Brute-Force
2026-03-21 13:54:17
(5 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2025-12-29 05:31:45
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:31:41.136031 2025] [security2:error] [pid 16500:tid 16500] [client 104.207.32.60:24155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "texascottagebakers.com"] [uri "/.env"] [unique_id "aVISPXEhuOL6FvDmzVpuCwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:58:34
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:58:28.958826 2025] [security2:error] [pid 18798:tid 18798] [client 104.207.32.60:16743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "booksforpoets.com"] [uri "/.env"] [unique_id "aVIKdIDkEGJK25-TcnLJbwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 18:50:46
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 13:50:43.315234 2025] [security2:error] [pid 28078:tid 28078] [client 104.207.32.60:46837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brbcash.com"] [uri "/.env"] [unique_id "aThvg7YinrVc2f9XAx6GlQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 20:25:27
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 15:25:22.783274 2025] [security2:error] [pid 10277:tid 10277] [client 104.207.32.60:46863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shannonraevocalstudio.com"] [uri "/.svn/wc.db"] [unique_id "aTc0MnSP5_-uo2YBgudiVQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 19:38:22
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 14:38:16.086037 2025] [security2:error] [pid 2179:tid 2179] [client 104.207.32.60:29759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oogeothermal.com"] [uri "/.svn/wc.db"] [unique_id "aTcpKNYEPcoHPWgf99isLAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-06 23:02:41
(8 months ago)
Auto-ban: >3000 req/min op 2025-12-06
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-12-05 11:34:01
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 06:33:57.200819 2025] [security2:error] [pid 19987:tid 19987] [client 104.207.32.60:50359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ccureiti.com"] [uri "/.git/HEAD"] [unique_id "aTLDJT-uKmg35gi7RbSMKQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:48:45
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:48:40.181762 2025] [security2:error] [pid 18515:tid 18515] [client 104.207.32.60:50133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "opere.com"] [uri "/.env"] [unique_id "aTJWGHSpPM_n5VtEcuKWAAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 00:56:42
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 19:56:37.079122 2025] [security2:error] [pid 13261:tid 13261] [client 104.207.32.60:25247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sketchnotebook.com"] [uri "/.git/HEAD"] [unique_id "aTItxTqZvwglt90FvZjsyQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
