🇺🇸
hostseries
2025-09-25 16:20:16
(1 year ago)
Trigger: LF_DISTATTACK
Brute-Force
🇺🇸
ipblock.com
2025-09-16 16:19:00
(1 year ago)
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-08-14 19:55:33
(1 year ago)
WP Admin Scan Activities
Web App Attack
🇩🇪
Kimax
2025-08-13 15:22:13
(1 year ago)
RdpGuard detected brute-force attempt on RDP
Brute-Force
🇺🇸
hostseries
2025-07-02 04:09:56
(1 year ago)
Trigger: LF_DISTATTACK
Brute-Force
🇪🇸
10dencehispahard SL
2025-06-30 06:12:31
(1 year ago)
WP probing for vulnerabilities
Hacking
Exploited Host
2025-06-26 04:54:12
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-05-12 03:34:43
(1 year ago)
(mod_security) mod_security (id:240335) triggered by 159.242.234.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 159.242.234.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 11 23:34:38.373517 2025] [security2:error] [pid 3841667:tid 3841667] [client 159.242.234.161:1647] [client 159.242.234.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 159.242.234.161 (+1 hits since last alert)|azcrittergetter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "azcrittergetter.com"] [uri "/xmlrpc.php"] [unique_id "aCFsTrhBBHFC3rSuILUTcwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-04-29 04:46:43
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇧🇷
hostseries
2025-04-07 00:03:06
(1 year ago)
Brute-force cPanel Services
Brute-Force
🇺🇸
TPI-Abuse
2024-12-09 16:35:23
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 159.242.234.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 159.242.234.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 09 11:35:19.657070 2024] [security2:error] [pid 7967:tid 7967] [client 159.242.234.161:29234] [client 159.242.234.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||victotex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "victotex.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z1ccRwtFgp1VLow9FRfW1QAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-13 08:09:20
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 159.242.234.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 159.242.234.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 03:09:12.334760 2024] [security2:error] [pid 16831:tid 16831] [client 159.242.234.161:13801] [client 159.242.234.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "confidantservice.com"] [uri "/.env"] [unique_id "ZzReqNIaVmIE7EN6Lxc5EwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-10 05:20:40
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 159.242.234.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 159.242.234.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 10 00:20:32.700210 2024] [security2:error] [pid 3916:tid 3916] [client 159.242.234.161:10853] [client 159.242.234.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anchorroots.com"] [uri "/.env"] [unique_id "ZzBCoFpmZTr5zXPEJYsJbQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-10-20 19:47:17
(2 years ago)
(pop3d) Failed POP3 login from 159.242.234.161 (DE/Germany/Hesse/Frankfurt am Main/-/[redacted])
Brute-Force
🇧🇷
hostseries
2023-12-20 21:24:48
(2 years ago)
Trigger: LF_DISTATTACK
Brute-Force