🇩🇰
RhQM
2026-11-13 14:54:06
UTC ·
(15 hours ago)
Bad Web Bot
Exploited Host
Web App Attack
🇧🇪
cmbplf
2026-11-05 15:59:07
UTC ·
(1 week ago)
6.585 requests in 1 hour (6d10h59m)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-29 11:25:18
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 07:25:12.986435 2026] [security2:error] [pid 24436:tid 24436] [client 107.158.145.166:5733 ...
show more
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 07:25:12.986435 2026] [security2:error] [pid 24436:tid 24436] [client 107.158.145.166:57332] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gapanda.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gapanda.com"] [uri "/php-old.ini"] [unique_id "auMtGELrZvKAprNHf0ak8AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 08:51:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 04:51:42.198770 2026] [security2:error] [pid 6705:tid 6705] [client 107.158.145.166:61990] ...
show more
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 04:51:42.198770 2026] [security2:error] [pid 6705:tid 6705] [client 107.158.145.166:61990] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||flashbackmusicmemories.com|F|2"] [data ".40svocaltrio.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "flashbackmusicmemories.com"] [uri "/www.40svocaltrio.com"] [unique_id "auMJHvtJxBjbI3nKx9hqvAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 07:58:04
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 03:57:56.991321 2026] [security2:error] [pid 20240:tid 20240] [client 107.158.145.166:6008 ...
show more
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 03:57:56.991321 2026] [security2:error] [pid 20240:tid 20240] [client 107.158.145.166:60083] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||greenroomonline.org|F|2"] [data ".whatzup.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "greenroomonline.org"] [uri "/publications.html/www.whatzup.com"] [unique_id "auL8hKQZl_467b5mtO7uWgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 07:09:13
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 03:09:06.701390 2026] [security2:error] [pid 12150:tid 12150] [client 107.158.145.166:5945 ...
show more
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 03:09:06.701390 2026] [security2:error] [pid 12150:tid 12150] [client 107.158.145.166:59458] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||accordionstars.com|F|2"] [data ".accordionfactory.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accordionstars.com"] [uri "/www.accordionfactory.com"] [unique_id "auLxElJI4P6aDVHIspcXTgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 05:31:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 01:31:14.085416 2026] [security2:error] [pid 8187:tid 8187] [client 107.158.145.166:53063] ...
show more
(mod_security) mod_security (id:210730) triggered by 107.158.145.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 01:31:14.085416 2026] [security2:error] [pid 8187:tid 8187] [client 107.158.145.166:53063] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.azcrittergetter.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.azcrittergetter.com"] [uri "/csfitz.com"] [unique_id "auLaItvua6QJezXdeHvr6wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-25 13:30:04
UTC ·
(2 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-22 15:13:17
UTC ·
(3 weeks ago)
Web exploit attempt | method: GET | path: /tel:+33781333702 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0
Hacking
Web App Attack
🇨🇳
Peter Yu
2026-10-04 10:56:56
UTC ·
(1 month ago)
Bad Web Bot
Web App Attack
🇮🇩
PENJAGA.AUM
2026-10-04 09:00:48
UTC ·
(1 month ago)
107.158.145.166 - Attack: Possible XSS attack, js event handler
Web App Attack
SQL Injection
Spoofing
🇫🇷
solution.it
2026-09-27 22:03:40
UTC ·
(1 month ago)
[Mon Sep 28 00:03:40.165425 2026] [php7:error] [pid 2408389:tid 2408389] [client 107.158.145.166:52747] script '/var/www/html/www.craccaaltesoro.it/wp-login.php' not found or unable to stat
Web App Attack
🇮🇹
VHosting
2026-09-19 22:10:04
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
