🇳🇱
exxos
2025-09-05 10:03:01
(9 months ago)
HTTP1.x attacks
DDoS Attack
2025-07-25 12:07:24
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-06-17 03:53:45
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 16 23:53:41.903040 2025] [security2:error] [pid 2294340:tid 2294340] [client 154.94.14.35:15449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valarien.com"] [uri "/.env"] [unique_id "aFDmxZ9rLI8c3sYJT_VO3QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2025-06-07 22:43:25
(11 months ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
🇨🇭
backslash
2025-06-07 10:45:04
(11 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-05-31 01:26:55
(1 year ago)
2025-05-31T03:26:55.239641+02:00 zanati wp(www.sahpa.co.za)[3332511]: Blocked authentication attempt ...
show more
2025-05-31T03:26:55.239641+02:00 zanati wp(www.sahpa.co.za)[3332511]: Blocked authentication attempt for [email protected] from 154.94.14.35
...
show less
Web App Attack
🇦🇺
MAGIC
2025-05-13 05:00:37
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-05-09 14:43:08
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 09 10:43:02.654552 2025] [security2:error] [pid 3224720:tid 3224720] [client 154.94.14.35:22909] [client 154.94.14.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stormwlf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stormwlf.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aB4Udj0kbw_dydo8y_iDQgAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-08 05:43:05
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 01:43:00.514461 2025] [security2:error] [pid 942180:tid 942180] [client 154.94.14.35:37377] [client 154.94.14.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||flamberge.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "flamberge.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aBxEZJ_5vEb5hJjY2rK06AAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-08 03:47:03
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 23:46:57.738287 2025] [security2:error] [pid 4032675:tid 4032698] [client 154.94.14.35:28667] [client 154.94.14.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kettlehill.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kettlehill.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aBwpMZ5u8JOy_SSmTT0KYQAAAJU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-04 11:50:43
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 07:50:37.401605 2025] [security2:error] [pid 1213561:tid 1213561] [client 154.94.14.35:49603] [client 154.94.14.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||advantagesystemsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "advantagesystemsgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aBdUjZ5OttPpbOMXkM4AsQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-04 08:23:35
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.14.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 04:23:32.191018 2025] [security2:error] [pid 3520869:tid 3520947] [client 154.94.14.35:22447] [client 154.94.14.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kincers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kincers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aBckBPZ8SeVxeps5KGdtkgAAAI4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-04-30 11:22:01
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇬🇧
Silly Development
2025-04-26 09:52:41
(1 year ago)
Malicious activity detected from 200373 DREI-K-TECH-GMBH towards host sillydev.co.uk (GET HTTP/2) @ ...
show more
Malicious activity detected from 200373 DREI-K-TECH-GMBH towards host sillydev.co.uk (GET HTTP/2) @ 2025-04-26T09:52:41Z (6 occurrences)
show less
DDoS Attack
Hacking
Exploited Host
2025-04-16 11:58:49
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH