🇫🇷
security.rdmc.fr
2026-08-30 01:53:29
(5 days ago)
Port Scan Attack proto:TCP src:29434 dst:23
Port Scan
🇯🇵
bokumin.org
2026-06-21 13:42:47
(2 months ago)
[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/wp-content/plugins/sexy ...
show more
[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/wp-content/plugins/sexy-contact-form/includes/fileupload/index.php"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
show less
Web App Attack
🇮🇹
VHosting
2026-01-27 03:39:29
(7 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇮🇳
Shaik Sai Meera
2025-10-10 11:57:09
(10 months ago)
IM360 WAF: Block Drupal/Joomla spammers - Fri Oct 10 04:45:31 2025
Hacking
2025-09-30 19:19:28
(11 months ago)
Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇩🇪
marzzzello
2025-08-13 02:56:51
(1 year ago)
Ports: 8x 14751
Port Scan
🇩🇪
marzzzello
2025-04-22 03:00:00
(1 year ago)
Ports: 8x 53275
Port Scan
2024-07-06 03:29:04
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
nationaleventpros.com
2024-07-06 03:21:47
(2 years ago)
WordPress login attempt
Brute-Force
2024-03-13 07:07:37
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-02-28 10:21:54
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 28 05:21:47.375080 2024] [security2:error] [pid 15018] [client 104.28.214.26:36570] [client 104.28.214.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grandriverhomes.com"] [uri "/.git/config"] [unique_id "Zd8JOwORYrjcX-18_VnNLgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-21 21:50:06
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 21 16:49:58.253408 2024] [security2:error] [pid 3691] [client 104.28.214.26:23119] [client 104.28.214.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justtomtheater.com"] [uri "/.git/config"] [unique_id "ZdZwBj0lC8ApP-_i1jXv0QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-16 18:51:27
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 16 13:51:19.429111 2024] [security2:error] [pid 13130] [client 104.28.214.26:31224] [client 104.28.214.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elbera.com"] [uri "/.git/config"] [unique_id "Zc-up3dj-1CtyACrO2uWsgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-16 16:53:43
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 16 11:53:38.803974 2024] [security2:error] [pid 17145] [client 104.28.214.26:64004] [client 104.28.214.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowerwood.com"] [uri "/.git/config"] [unique_id "Zc-TEsiveguost5nhHMRUQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-14 17:57:39
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.214.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 14 12:57:34.090368 2024] [security2:error] [pid 14488:tid 47093471299328] [client 104.28.214.26:29838] [client 104.28.214.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ptenterprises.com"] [uri "/.git/config"] [unique_id "Zcz_Dq2nUeyWkdYz_LRMJAAAAU4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
