Anonymous
2025-09-18 01:54:07
(8 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2025-09-11 14:03:31
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 156.233.91.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 156.233.91.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 10:03:24.149824 2025] [security2:error] [pid 31839:tid 31882] [client 156.233.91.45:33565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blog.spinningdesigns.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aMLWrEgJSg9Nzjy5zdAZ2gAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-11 00:39:00
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 156.233.91.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 156.233.91.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 20:38:53.732928 2025] [security2:error] [pid 31399:tid 31399] [client 156.233.91.45:37117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.branze.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.branze.com"] [uri "/s3cmd.ini"] [unique_id "aMIaHaSGwvkI3ILuqaovvQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-10 12:07:43
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 156.233.91.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 156.233.91.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 08:07:37.382281 2025] [security2:error] [pid 2220485:tid 2220512] [client 156.233.91.45:23561] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bh4sale.omegaoak.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bh4sale.omegaoak.com"] [uri "/s3cmd.ini"] [unique_id "aMFqCRpOg_QblU3vYKiE4gAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-06 14:12:43
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 156.233.91.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 156.233.91.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 10:12:35.503487 2025] [security2:error] [pid 31201:tid 31201] [client 156.233.91.45:27839] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.beambags.us.book-arts.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.beambags.us.book-arts.com"] [uri "/s3cmd.ini"] [unique_id "aLxBU8XZ96iQvoUGceMjDAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
10dencehispahard SL
2025-07-30 07:29:22
(10 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
Anonymous
2025-07-22 03:19:51
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐จ๐ฆ
Not Fake
2025-06-29 23:47:20
(11 months ago)
$f2bV_matches
Web App Attack
๐ช๐ธ
10dencehispahard SL
2025-06-20 05:16:20
(11 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
๐บ๐ธ
Psycho Solutions LLC
2025-06-19 17:54:51
(11 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 6/19/2025 5:54 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
Psycho Solutions LLC
2025-06-13 15:50:23
(11 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 6/13/2025 3:50 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2025-06-10 17:10:05
(11 months ago)
block ruleset SQL-Injection: >iKO AFBC2EAECDB027719265B50DA3B95A6DF54F7E3D
SQL Injection
๐ฌ๐ง
Bytemark
2025-06-09 19:11:28
(11 months ago)
156.233.91.45 - - [09/Jun/2025:20:11:20 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.goog ...
show more
156.233.91.45 - - [09/Jun/2025:20:11:20 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
156.233.91.45 - - [09/Jun/2025:20:11:22 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
156.233.91.45 - - [09/Jun/2025:20:11:27 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐ซ๐ท
Psycho Solutions LLC
2025-06-03 02:16:40
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 6/3/2025 2:16 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
Psycho Solutions LLC
2025-06-02 14:57:49
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 6/2/2025 2:57 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack