🇱🇻
garmtech.com
2026-03-05 18:49:36
(3 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇱🇻
garmtech.com
2026-03-04 02:43:25
(3 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇱🇻
garmtech.com
2026-03-04 02:43:21
(3 months ago)
IM360 WAF: WordPress plugin/theme auto install block
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 07:44:16
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇨🇭
backslash
2026-01-04 23:00:18
(5 months ago)
block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1
Bad Web Bot
🇫🇮
Shaik Sai Meera
2025-11-25 20:05:05
(6 months ago)
IM360 WAF: Hidden file access
Brute-Force
2025-11-25 17:55:02
(6 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:54:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:54:09.591533 2025] [security2:error] [pid 15407:tid 15407] [client 104.207.55.222:19101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.borzoi-pedigree.info"] [uri "/.env"] [unique_id "aSVEgdNvHYLGGtlruroUZQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:25:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:25:11.605457 2025] [security2:error] [pid 18972:tid 18972] [client 104.207.55.222:42129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rbmediaworks.com"] [uri "/.svn/wc.db"] [unique_id "aSUvp9Hoa6pEXEResNEiCwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:42:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:42:01.303814 2025] [security2:error] [pid 9319:tid 9319] [client 104.207.55.222:14279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.leonardodecaprio.com"] [uri "/.git/HEAD"] [unique_id "aSUlidDlhlIAidoBEJ-mXAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:35:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:35:21.900147 2025] [security2:error] [pid 17232:tid 17232] [client 104.207.55.222:35747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.calendarchristmascards.com"] [uri "/.env"] [unique_id "aSUV6ezEcYSV2L-604Jp4QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2025-10-18 09:23:49
(7 months ago)
12 packets to port 22
Brute-Force
SSH
2025-10-17 18:53:18
(7 months ago)
Failed Wordpress login
Hacking
Brute-Force
Web App Attack
2025-10-15 18:39:52
(8 months ago)
Failed Wordpress login
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-10-10 21:26:43
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 104.207.55.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 17:26:37.346846 2025] [security2:error] [pid 19533:tid 19533] [client 104.207.55.222:38181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||macryder.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "macryder.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOl6DThBUTuqenoeGzkoowAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack