🇩🇪
Hazzard
2026-05-16 08:20:16
(1 month ago)
(wordpress) Failed wordpress login from 104.207.48.165 (BR/Brazil/São Paulo/São Paulo/-/[redacted]): ...
show more
(wordpress) Failed wordpress login from 104.207.48.165 (BR/Brazil/São Paulo/São Paulo/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇮🇹
VHosting
2026-01-03 15:50:03
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇨🇭
backslash
2025-12-30 21:50:02
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:08
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-02 13:39:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 08:39:35.929284 2025] [security2:error] [pid 10394:tid 10394] [client 104.207.48.165:9817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chicmeow.com"] [uri "/.env"] [unique_id "aS7sFzYxOsC-hWExeeNpwAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 08:03:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:03:14.768297 2025] [security2:error] [pid 5760:tid 5760] [client 104.207.48.165:29901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "volunteergems.com"] [uri "/.svn/wc.db"] [unique_id "aS6dQtbnvsijg2_f4rWOwgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 06:01:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:01:20.604142 2025] [security2:error] [pid 17120:tid 17120] [client 104.207.48.165:19477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rlsills.com"] [uri "/.env"] [unique_id "aS6AsD_tawqWf8z7p74qOgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:16:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:16:20.838157 2025] [security2:error] [pid 23014:tid 23014] [client 104.207.48.165:36459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barryschiller.com"] [uri "/.env"] [unique_id "aS52JDgfkGCV7r8dNE0tHgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2025-12-02 00:50:33
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-29 00:39:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 19:38:59.802579 2025] [security2:error] [pid 24452:tid 24452] [client 104.207.48.165:22899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abortiontragedies.com"] [uri "/wp-config.php.bak"] [unique_id "aSpAo_ZFMOaYr8mp_uk3zQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 20:39:19
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:39:13.897811 2025] [security2:error] [pid 13251:tid 13269] [client 104.207.48.165:53285] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||12am.us|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "12am.us"] [uri "/dump.sql"] [unique_id "aSoIceko13oQFHtbHuJgaAAAAdA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 19:37:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 14:37:24.262973 2025] [security2:error] [pid 30402:tid 30402] [client 104.207.48.165:43361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aamaquera.com"] [uri "/.env.backup"] [unique_id "aSn59JU1_aK_S29lh1k7cAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 17:32:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:32:28.061111 2025] [security2:error] [pid 28163:tid 28163] [client 104.207.48.165:16789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americaaborn.com"] [uri "/.env.backup"] [unique_id "aSncrAvhdH9yT4Uk3E5vwAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-11 08:18:55
(8 months ago)
Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.11 is noted in report ti ...
show more
Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.11 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-10 22:26:17
(8 months ago)
Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.10 is noted in report t ...
show more
Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.10 is noted in report timestamp
show less
Hacking
Brute-Force