🇨🇭
backslash
2026-08-24 09:27:00
(2 days ago)
Web Spam
🇩🇪
FeG Deutschland
2026-08-23 19:51:33
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇦🇺
oncord
2026-08-22 23:18:44
(3 days ago)
Form spam
Web Spam
🇦🇺
oncord
2026-08-19 19:53:02
(1 week ago)
Form spam
Web Spam
2026-08-15 15:46:11
(1 week ago)
[osotir.org] httpd-login-spray-site: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir.org.lo ...
show more
[osotir.org] httpd-login-spray-site: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir.org.log; samples=site_wide=true | distinct_ips=15 | /wp-login.php
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 18:58:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 140.235.0.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 140.235.0.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:58:36.272124 2026] [security2:error] [pid 20266:tid 20266] [client 140.235.0.60:19817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kotelbarmitzvah.com"] [uri "/wp-config.php.bak"] [unique_id "ag4EXM84d4Bp7hVvzFdF9AAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 14:50:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 140.235.0.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 140.235.0.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 10:50:21.539886 2026] [security2:error] [pid 17571:tid 17571] [client 140.235.0.60:9679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolcustomweddingproducts.com"] [uri "/wp-config.php.bak"] [unique_id "ag3KLfkRcT75ePZORLOWLgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 13:03:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 140.235.0.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 140.235.0.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 09:03:43.223326 2026] [security2:error] [pid 19965:tid 19965] [client 140.235.0.60:33515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "natickvillagerentals.com"] [uri "/wp-config.php.old"] [unique_id "ag2xLzY6DYMZbE0GivIsWQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 11:51:24
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 140.235.0.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 140.235.0.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 07:51:16.296552 2026] [security2:error] [pid 5729:tid 5729] [client 140.235.0.60:29361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qed-consulting.co"] [uri "/wp-config.php.dist"] [unique_id "ag2gNJlfVXNMf6gzFYtdPgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
antihack.anarchista.xyz
2026-05-19 07:54:08
(3 months ago)
404 burst: 20 hits in 5 min, URI /wp-content/plugins/sitepress-multilingual-cms/readme.txt, Ref , UA ...
show more
404 burst: 20 hits in 5 min, URI /wp-content/plugins/sitepress-multilingual-cms/readme.txt, Ref , UA Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Brute-Force
Web App Attack
Bad Web Bot
🇲🇾
Rizzy
2026-05-17 13:09:53
(3 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇨🇭
4server
2026-04-30 20:11:09
(3 months ago)
[ThuApr3022:11:06.0836692026][security2:error][pid4107202:tid4107596][client140.235.0.60:0]ModSecuri ...
show more
[ThuApr3022:11:06.0836692026][security2:error][pid4107202:tid4107596][client140.235.0.60:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"mondo-it.ch\"][uri\"/wp-content/plugins/chatbot/readme.txt\"][unique_id\"afO3WnRkCKHvVzCgpm82iQAAABU\"]
show less
Hacking
Web App Attack
🇫🇷
masterguru
2026-04-16 22:59:32
(4 months ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
2026-01-21 13:51:00
(7 months ago)
Brute force on VPN
Brute-Force
Bad Web Bot
🇱🇻
garmtech.com
2026-01-02 23:47:05
(7 months ago)
IM360 WAF: Attempt to upload malware
Hacking