🇨🇭
backslash
2026-05-18 00:09:44
(2 weeks ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-16 23:41:40
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 167.253.49.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 167.253.49.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 19:41:33.459336 2026] [security2:error] [pid 8307:tid 8307] [client 167.253.49.61:34129] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Power Chairs/Compass HD/Thumbs.db"] [unique_id "agkArTYbIr2gcw623pYzIQAAAAc"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Power%20Chairs/Compass%20HD/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-03-11 13:27:11
(2 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇮🇹
VHosting
2026-02-25 11:35:05
(3 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇧🇪
voormedia
2026-02-09 05:09:17
(3 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇫🇷
tilellit.pro
2026-02-06 15:35:49
(4 months ago)
Fail2Ban banned 167.253.49.61 for security violations in jail wp-armour. Log: 2026/02/06 15:35:49 [e ...
show more
Fail2Ban banned 167.253.49.61 for security violations in jail wp-armour. Log: 2026/02/06 15:35:49 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 167.253.49.61 | Target: wplogin" , client: 167.253.49.61, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇪🇸
el-brujo
2026-02-05 13:35:51
(4 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:146.0) Gecko/20100101 Firefox/146.0 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-02-05T13:35:51Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇫🇷
tilellit.pro
2026-02-05 09:42:49
(4 months ago)
Fail2Ban banned 167.253.49.61 for security violations in jail wp-armour. Log: 2026/02/05 09:42:49 [e ...
show more
Fail2Ban banned 167.253.49.61 for security violations in jail wp-armour. Log: 2026/02/05 09:42:49 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 167.253.49.61 | Target: wplogin" , client: 167.253.49.61, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
nowyouknow
2025-12-19 16:18:52
(5 months ago)
(From [email protected] ) Hello Team,
I typed your main service keywords into Google today ...
show more
(From [email protected] ) Hello Team,
I typed your main service keywords into Google today, and I noticed something frustrating. Your website is professionally designed, but it’s buried on Page 2.
Meanwhile, 2 or 3 of your direct competitors, who frankly have weaker websites than you—are sitting at the top of Page 1.
They are effectively "stealing" leads that were looking for you. They aren't better than you; they just have better SEO signals.
I’ve already analyzed exactly what they are doing differently.
If you want to see the comparison report, just reply "Yes" and I’ll send it over.
Cheers,
QIK
show less
Phishing
Web Spam
🇫🇷
Sklurk
2024-11-12 04:19:25
(1 year ago)
Web App Attack
Web App Attack
🇨🇦
wil.com
2024-10-29 04:02:09
(1 year ago)
GlobalProtect login attempts with user svcsql.
VPN IP
Brute-Force