2026-10-11 04:58:52
(6 hours ago)
13112/tcp (1 or more attempts)
Port Scan
ππ°
ιΉιΉ
2026-10-11 01:11:43
(10 hours ago)
monitor: on ser162528253480 | port: 10547 | ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Repor ...
show more
monitor: on ser162528253480 | port: 10547 | ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2026-10-10 22:45:19
(12 hours ago)
14805/tcp (1 or more attempts)
Port Scan
2026-10-10 16:42:16
(18 hours ago)
14087/tcp (1 or more attempts)
Port Scan
π¬π§
openstrike.co.uk
2024-01-27 06:12:25
(2 years ago)
1698 attacks on PHP URLs, site downloads (type 2):
GET /maRR.php/Clouds25$$/ HTTP/1.1
GET /tmp/ HTTP ...
show more
1698 attacks on PHP URLs, site downloads (type 2):
GET /maRR.php/Clouds25$$/ HTTP/1.1
GET /tmp/ HTTP/1.1
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2024-01-26 07:29:50
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 26 02:29:45.874553 2024] [security2:error] [pid 23420] [client 178.128.214.220:63802] [client 178.128.214.220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kidswithcamerasmovie.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kidswithcamerasmovie.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZbNfaeQQ0z8FgakhSUC9NwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
BlueWire Hosting
2024-01-26 05:10:07
(2 years ago)
Probing for Wordpress vulnerabilities
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-01-25 22:33:06
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 25 17:32:59.029922 2024] [security2:error] [pid 22216] [client 178.128.214.220:54864] [client 178.128.214.220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paulbihn.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paulbihn.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZbLhm3ejOg2y6Evuqmox8gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-01-25 18:05:01
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 25 13:04:56.930974 2024] [security2:error] [pid 4501] [client 178.128.214.220:52588] [client 178.128.214.220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kraftrentals.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kraftrentals.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZbKiyPaPjFvEe1sMuvltbgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-01-24 00:32:20
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 23 19:32:12.689884 2024] [security2:error] [pid 4898] [client 178.128.214.220:64169] [client 178.128.214.220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||body-tone.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "body-tone.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZbBajPmbwWA3krNpReKYHwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-01-23 22:50:17
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 23 17:50:13.184844 2024] [security2:error] [pid 17771] [client 178.128.214.220:56706] [client 178.128.214.220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lucid-events.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lucid-events.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZbBCpfiLPgvdyjXkcDOM4AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-01-23 21:19:14
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 23 16:19:06.873033 2024] [security2:error] [pid 15018] [client 178.128.214.220:59205] [client 178.128.214.220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lamanchaorchards.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lamanchaorchards.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZbAtSiliQGndeSVBm7E7agAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-01-23 06:56:03
(2 years ago)
Bot / scanning and/or hacking attempts: GET /0z.php HTTP/1.1, GET /plugins.php HTTP/1.1, GET /byp.ph ...
show more
Bot / scanning and/or hacking attempts: GET /0z.php HTTP/1.1, GET /plugins.php HTTP/1.1, GET /byp.php HTTP/1.1, GET /xl2023.php HTTP/1.1, GET /1.php HTTP/1.1, GET /small.php HTTP/1.1, GET /lufix.php HTTP/1.1, GET /admin.php HTTP/1.1, GET /edit-comments.php HTTP/1.1, GET /upload.php HTTP/1.1, GET /smm.php HTTP/1.1, GET /wp.php HTTP/1.1, GET /log.php HTTP/1.1, GET /init.php HTTP/1.1, GET /classwithtostring.php HTTP/1.1, GET /wp-content/index.php HTTP/1.1, GET /about.php HTTP/1.1, GET /cloud.php HTTP/1.1, GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1, GET /gecko.php HTTP/1.1, GET /user.php HTTP/1.1, GET /wp-content/plugins/index.php HTTP/1.1, GET /mini.php HTTP/1.1
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2024-01-23 06:50:18
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 23 01:50:11.741557 2024] [security2:error] [pid 27524] [client 178.128.214.220:55006] [client 178.128.214.220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ralphspic.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ralphspic.com"] [uri "/site/default/settings.php.BAK"] [unique_id "Za9ho-39wdXxc-fhkvoS5AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-01-21 15:06:08
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.214.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 21 10:06:01.977228 2024] [security2:error] [pid 11412] [client 178.128.214.220:56724] [client 178.128.214.220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.paleopathologist.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.paleopathologist.com"] [uri "/site/default/settings.php.BAK"] [unique_id "Za0y2XXp6EgstPzinK-nzAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
