๐ฌ๐ง
ISPLtd
2026-10-12 16:22:29
(49 minutes ago)
104.22.43.74 - - [12/Oct/2026:13:22:29 -0300] "GET /wp-PII/install.php?step=1
104.22.43.74 - - [12/O ...
show more
104.22.43.74 - - [12/Oct/2026:13:22:29 -0300] "GET /wp-PII/install.php?step=1
104.22.43.74 - - [12/Oct/2026:13:22:29 -0300] "GET /wp-PII/install.php?step=1
...
show less
Hacking
Web App Attack
๐ฌ๐ง
ISPLtd
2026-10-12 14:26:05
(2 hours ago)
104.22.43.74 - - [12/Oct/2026:11:26:05 -0300] "GET /wp-PII/install.php?step=1
104.22.43.74 - - [12/O ...
show more
104.22.43.74 - - [12/Oct/2026:11:26:05 -0300] "GET /wp-PII/install.php?step=1
104.22.43.74 - - [12/Oct/2026:11:26:05 -0300] "GET /wp-PII/install.php?step=1
...
show less
Hacking
Web App Attack
๐ฌ๐ง
ISPLtd
2026-10-12 02:55:36
(14 hours ago)
104.22.43.74 - - [11/Oct/2026:23:55:36 -0300] "GET /wp-PII/install.php?step=1
104.22.43.74 - - [11/O ...
show more
104.22.43.74 - - [11/Oct/2026:23:55:36 -0300] "GET /wp-PII/install.php?step=1
104.22.43.74 - - [11/Oct/2026:23:55:36 -0300] "GET /wp-PII/install.php?step=1
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-11 22:02:07
(19 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-10.
show less
Web App Attack
SSH
Hacking
๐ฌ๐ง
ISPLtd
2026-10-11 17:14:41
(23 hours ago)
104.22.43.74 - - [11/Oct/2026:14:14:41 -0300] "GET /wp-PII/install.php?step=1
104.22.43.74 - - [11/O ...
show more
104.22.43.74 - - [11/Oct/2026:14:14:41 -0300] "GET /wp-PII/install.php?step=1
104.22.43.74 - - [11/Oct/2026:14:14:41 -0300] "GET /wp-PII/install.php?step=1
...
show less
Hacking
Web App Attack
๐บ๐ธ
MatCat
2026-10-11 10:05:09
(1 day ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
๐ณ๐ฑ
homeshowdomain.nl
2026-10-10 22:00:24
(1 day ago)
Auto-ban: >3000 req/min op 2026-10-10
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-09 21:15:03
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.22.43.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.43.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 17:14:57.129138 2026] [security2:error] [pid 19792:tid 19792] [client 104.22.43.74:9888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southshorestreetrods.com"] [uri "/.git/config"] [unique_id "aslZUe9z_F5_B8ETPewJRAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 20:22:34
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.22.43.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.43.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 16:22:29.502485 2026] [security2:error] [pid 5269:tid 5296] [client 104.22.43.74:13170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scottspencergfx.com"] [uri "/.git/config"] [unique_id "aslNBaqkk6SGKDvRPbpfhQAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 19:23:37
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.22.43.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.43.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 15:23:29.702575 2026] [security2:error] [pid 18530:tid 18530] [client 104.22.43.74:12339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rootsofwellnessayurveda.com"] [uri "/.git/config"] [unique_id "ask_MYuMYicrgs6S_PVzggAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-10-09 14:59:45
(3 days ago)
[Sat Oct 10 01:59:43.980732 2026] [security2:error] [pid 666358] [client 104.22.43.74:14310] [client ...
show more
[Sat Oct 10 01:59:43.980732 2026] [security2:error] [pid 666358] [client 104.22.43.74:14310] [client 104.22.43.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/.git/config"] [unique_id "askBXw4lsORnx1FUMzlGhgAAAAw"]
...
show less
Web App Attack