2026-05-31 03:02:23
(1 week ago)
[ns31.kdns.gr] httpd-login-spray-site: sites=vasilikisagkioti.gr; logs=/var/log/httpd/domains/vasili ...
show more
[ns31.kdns.gr] httpd-login-spray-site: sites=vasilikisagkioti.gr; logs=/var/log/httpd/domains/vasilikisagkioti.gr.log; samples=site_wide=true | distinct_ips=15 | /wp-login.php
show less
Hacking
Web App Attack
🇫🇷
ELYAZ
2026-05-30 12:17:36
(1 week ago)
(y4) Failed scan -byebye- from 104.207.47.186 (US/United States/-): (CF_ENABLE)
Hacking
🇦🇺
HJ5Ss4Ju
2026-05-28 12:10:40
(1 week ago)
Blocked by Wordfence (SID 6)
Web App Attack
🇲🇹
Malta
2026-05-26 02:32:32
(1 week ago)
104.207.47.186 - - [26/May/2026:04:32:31 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
104.207.47.186 - - [26/May/2026:04:32:31 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇪🇸
librebit
2026-05-15 01:24:47
(3 weeks ago)
Brute force
Brute-Force
🇩🇪
MusicLibrary
2026-03-23 13:17:55
(2 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇳🇱
jjnxpct
2026-02-16 04:55:08
(3 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /v2/.git/config (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
2026-02-15 13:05:45
(3 months ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:28:51
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:28:46.524851 2026] [security2:error] [pid 30549:tid 30549] [client 104.207.47.186:18081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oxygenfarm.com"] [uri "/api/.git/config"] [unique_id "aZGt7uTf0UHSdVM0hpxyEgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:12:55
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:12:46.981375 2026] [security2:error] [pid 588735:tid 588735] [client 104.207.47.186:38419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "purelywhimsical.com"] [uri "/v2/.git/config"] [unique_id "aZGqLpvZgQg9VmHxJ8MuOwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:28:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:28:25.951560 2026] [security2:error] [pid 6783:tid 6783] [client 104.207.47.186:41129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scothorn.net"] [uri "/backup/.git/config"] [unique_id "aZFniR1-fXWUhG4lxwGXegAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-15 06:07:02
(3 months ago)
Scanning/Probing (26)
Brute-Force
Web App Attack
🇩🇪
iNetWorker
2026-02-15 05:53:47
(3 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:34:02
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:33:55.338173 2026] [security2:error] [pid 29874:tid 29874] [client 104.207.47.186:49363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prcs.biz"] [uri "/admin/.env"] [unique_id "aZFMs20nS9xsqW1EDGBlRAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 02:29:51
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:29:37.752216 2026] [security2:error] [pid 946:tid 946] [client 104.207.47.186:16161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nexthop.com"] [uri "/backup/.git/config"] [unique_id "aZEvkSBt7MwwZWw6UaycFQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack