🇨🇭
backslash
2026-10-27 18:18:05
(1 day ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇺🇸
dtorrer
2026-10-26 03:02:30
(3 days ago)
Brute-force general attack.
Brute-Force
🇲🇹
Malta
2026-10-25 19:23:31
(3 days ago)
160.242.24.0 - - [25/Oct/2026:20:23:31 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-10-24 12:13:45
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 160.242.24.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:13:42.957622 2026] [security2:error] [pid 1940:tid 2017] [client 160.242.24.0:32197] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 160.242.24.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:13:42.957622 2026] [security2:error] [pid 1940:tid 2017] [client 160.242.24.0:32197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grupojdg.neotienda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grupojdg.neotienda.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atyg9i9VV0Q4HbNaZ3UCcQAAAUc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 11:54:37
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 160.242.24.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 07:54:29.389576 2026] [security2:error] [pid 1051:tid 1051] [client 160.242.24.0:45325] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 160.242.24.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 07:54:29.389576 2026] [security2:error] [pid 1051:tid 1051] [client 160.242.24.0:45325] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||luxandunion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "luxandunion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atycdaJXefSCAGH1xHWGjgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hero2026
2026-10-24 01:55:29
(5 days ago)
Blocked by Fail2ban
Web App Attack
🇨🇦
AEITS
2026-10-22 05:58:17
(6 days ago)
Fail2Ban www
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-20 08:16:50
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 08:35:52
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 160.242.24.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:35:48.064070 2026] [security2:error] [pid 8597:tid 8597] [client 160.242.24.0:22324] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 160.242.24.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:35:48.064070 2026] [security2:error] [pid 8597:tid 8597] [client 160.242.24.0:22324] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||christaylorjazzpianist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "christaylorjazzpianist.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asyb5GkFNpOHcA5gm8rmlwAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 12:19:48
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 160.242.24.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 08:19:41.049466 2026] [security2:error] [pid 17233:tid 17233] [client 160.242.24.0:10348] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 160.242.24.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 08:19:41.049466 2026] [security2:error] [pid 17233:tid 17233] [client 160.242.24.0:10348] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.edmontonareahomes.digitalracemedia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.edmontonareahomes.digitalracemedia.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aseKXdxxiJceiiU6jDgXwgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
maxxsense
2026-10-07 18:43:30
(3 weeks ago)
(postfix-unknown) Failed postfix unknown login with username [redacted] from 160.242.24.0 (AO/Angola/-)
Hacking
🇨🇿
lp
2026-10-05 09:22:05
(3 weeks ago)
Email account brute force: 1 attempts were recorded from 160.242.24.0
2026-10-05T10:28:57+02:00 warning: unknown[160.242.24.0]: SASL PLAIN authentication failed: authentication failure,
[email protected]
Brute-Force
2026-10-05 07:46:49
(3 weeks ago)
2026-10-05T10:46:49.098944+03:00 shell.l3.fi postfix/smtps/smtpd[2582633]: warning: unknown[160.242.24.0]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=kivi05
2026-10-05T10:46:49.252724+03:00 shell.l3.fi postfix/smtps/smtpd[2 ...
show more
2026-10-05T10:46:49.098944+03:00 shell.l3.fi postfix/smtps/smtpd[2582633]: warning: unknown[160.242.24.0]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=kivi05
2026-10-05T10:46:49.252724+03:00 shell.l3.fi postfix/smtps/smtpd[2582633]: disconnect from unknown[160.242.24.0] ehlo=1 auth=0/1 commands=1/2
...
show less
Email Spam
Brute-Force
🇩🇪
big-cloud.nl
2026-10-03 19:32:01
(3 weeks ago)
Try to access /xmlrpc.php
Web App Attack
2026-10-03 01:57:41
(3 weeks ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
