🇨🇴
adalbertoreyes.org
2026-07-10 21:08:15
(2 weeks ago)
CategoryPortScan
Port Scan
🇫🇷
Sklurk
2026-07-09 00:56:09
(2 weeks ago)
Web App Attack
Web App Attack
🇩🇪
Interceptor_HQ
2026-07-06 03:29:35
(2 weeks ago)
request_uri: /pma/ -- automatic report --
Brute-Force
Hacking
🇺🇸
omc
2026-07-06 02:46:41
(2 weeks ago)
GET /migrate/ [QA].
Bad Web Bot
🇩🇪
iNetWorker
2026-07-05 17:51:37
(2 weeks ago)
trolling for resource vulnerabilities
Web App Attack
🇩🇪
4server
2026-07-05 15:24:26
(2 weeks ago)
[SunJul0517:24:23.2259422026][security2:error][pid3008654:tid3008738][client104.207.39.132:0]ModSecu ...
show more
[SunJul0517:24:23.2259422026][security2:error][pid3008654:tid3008738][client104.207.39.132:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"essesolution.ch.136-243-54-122.cpanel.site\"][uri\"/symfony/.env\"][unique_id\"akp3Jx57zghwJKp5FnWnxQAAAIo\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
factor1
2026-07-05 15:14:14
(2 weeks ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
🇫🇷
pm33
2026-07-02 10:43:35
(3 weeks ago)
Wordpress login attempts
Brute-Force
🇫🇷
pm33
2026-06-28 04:03:17
(3 weeks ago)
Wordpress login attempts
Brute-Force
2026-06-27 20:19:03
(3 weeks ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇬🇷
setupgr
2026-06-25 15:32:05
(4 weeks ago)
(mod_security) mod_security (id:900001) triggered by 104.207.39.132 (US/United States/Virginia/Ashbu ...
show more
(mod_security) mod_security (id:900001) triggered by 104.207.39.132 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 18:32:04.000141 2026] [security2:error] [pid 357906:tid 358032] [client 104.207.39.132:27985] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-login.php"] [unique_id "aj1J9Do1r-5gKidmz9LUKgAAAMU"], referer: https://mail.doityourself.gr/wp-login.php
show less
Port Scan
🇬🇷
setupgr
2026-06-24 19:58:02
(1 month ago)
(mod_security) mod_security (id:900001) triggered by 104.207.39.132 (US/United States/Virginia/Ashbu ...
show more
(mod_security) mod_security (id:900001) triggered by 104.207.39.132 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 24 22:57:59.145810 2026] [security2:error] [pid 278468:tid 278630] [client 104.207.39.132:54487] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.asteriassantorini.com"] [severity "CRITICAL"] [tag "security"] [hostname "mail.asteriassantorini.com"] [uri "/wp-login.php"] [unique_id "ajw2xzcITRl5Dj1Mnx0ikQAAANU"], referer: https://mail.asteriassantorini.com/wp-login.php
show less
Port Scan
🇫🇷
ELYAZ
2026-06-24 06:42:00
(1 month ago)
(y4) Failed scan -byebye- from 104.207.39.132 (US/United States/-): (CF_ENABLE)
Hacking
🇫🇷
ELYAZ
2026-06-23 05:02:58
(1 month ago)
(y4) Failed scan -byebye- from 104.207.39.132 (US/United States/-): (CF_ENABLE)
Hacking
🇬🇷
setupgr
2026-06-22 16:57:17
(1 month ago)
(mod_security) mod_security (id:900001) triggered by 104.207.39.132 (US/United States/Virginia/Ashbu ...
show more
(mod_security) mod_security (id:900001) triggered by 104.207.39.132 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 19:57:16.091822 2026] [security2:error] [pid 2059052:tid 2059103] [client 104.207.39.132:45451] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "doityourself.gr"] [uri "/wp-login.php"] [unique_id "ajlpbFNPFwkSkEkc_m2enwAAARg"], referer: https://doityourself.gr/wp-login.php
show less
Port Scan