🇩🇪
tvipper.com
2026-07-18 13:21:41
(4 days ago)
Auto reported by IDS
Hacking
🇩🇪
stinpriza
2026-07-12 04:53:22
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
rsa
2026-07-06 18:59:00
(2 weeks ago)
POST /wp-login.php HTTP/1.1
DDoS Attack
Brute-Force
Exploited Host
Web App Attack
Hacking
🇲🇽
octageeks.com
2026-07-04 04:10:50
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
iNetWorker
2026-07-03 05:07:15
(2 weeks ago)
trolling for resource vulnerabilities
Web App Attack
2026-06-30 09:57:23
(3 weeks ago)
[ns19.kdns.gr] httpd-login-spray-site: sites=t-support.gr; logs=/var/log/httpd/domains/t-support.gr. ...
show more
[ns19.kdns.gr] httpd-login-spray-site: sites=t-support.gr; logs=/var/log/httpd/domains/t-support.gr.log; samples=site_wide=true | distinct_ips=32 | /wp-login.php
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-06-26 17:45:08
(3 weeks ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
lostswordfish.com
2026-06-24 16:36:03
(4 weeks ago)
Wordfence waf block on 1105merrystreet
Web App Attack
🇨🇴
ingentar
2026-06-24 13:39:19
(4 weeks ago)
2026-06-24T08:38:37.303327-05:00 web wordpress(industriasgenio.co)[2386142]: Blocked authentication ...
show more
2026-06-24T08:38:37.303327-05:00 web wordpress(industriasgenio.co)[2386142]: Blocked authentication attempt for root from 104.207.42.172
...
show less
Web App Attack
Brute-Force
🇪🇸
librebit
2026-05-26 00:35:20
(1 month ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-02-15 12:44:28
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.172 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:44:21.723446 2026] [security2:error] [pid 12789:tid 12807] [client 104.207.42.172:29691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toastandfigs.com"] [uri "/admin/.env"] [unique_id "aZG_pR0_RFMVRLILfS06RQAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-15 12:09:42
(5 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.42.172 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.42.172 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:43:16
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.172 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:43:08.834747 2026] [security2:error] [pid 2034:tid 2034] [client 104.207.42.172:54339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thommesen.net"] [uri "/.git/config"] [unique_id "aZGxTGH7yYAqkEG53-SpQAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:04:09
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.172 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:04:03.779328 2026] [security2:error] [pid 2324:tid 2324] [client 104.207.42.172:56439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "syconline.com"] [uri "/api/.git/config"] [unique_id "aZFh094fl_2gHK_Wfg_U5gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:53:11
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.172 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:53:05.488024 2026] [security2:error] [pid 8186:tid 8186] [client 104.207.42.172:29885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "suffolksystems.com"] [uri "/.env.save"] [unique_id "aZFRMeIhm9xQGPQ4q_sFpgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack