🇫🇷
✨
2026-10-22 01:42:08
(19 hours ago)
Domain : byja.co.uk
Rule : env
2026-10-22 01:40:33 ***hidden-privacy*** GET /.env/ - 443 - 179.65.14 ...
show more
Domain : byja.co.uk
Rule : env
2026-10-22 01:40:33 ***hidden-privacy*** GET /.env/ - 443 - 179.65.145.71 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 - byja.co.uk 200 0 0 21093 298 1923 - -
show less
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-10-21 22:50:15
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:50:11.657818 2026] [security2:error] [pid 18264:tid 18264] [client 179.65.145.71:19444] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sawted.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sawted.com"] [uri "/sawted/wp-json/wp/v2/users"] [unique_id "atlBo-Vlixbj0YPswv7biQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 16:50:59
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 12:50:52.907753 2026] [security2:error] [pid 8771:tid 8771] [client 179.65.145.71:43323] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grandpont-house.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grandpont-house.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atjtbLruLKfBCFzwUwwlggAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 15:58:40
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 11:58:33.576936 2026] [security2:error] [pid 16718:tid 16718] [client 179.65.145.71:22229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.accommodation-perthairport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.accommodation-perthairport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atjhKWSofFRfN895WaCEHAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 13:32:23
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:32:15.162192 2026] [security2:error] [pid 23347:tid 23347] [client 179.65.145.71:42629] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newlifecommunitycare.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newlifecommunitycare.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ati-38wmPeg5IMZksTf53AAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-21 12:13:52
(1 day ago)
angleseaarthouse.com.au:443 179.65.145.71 - - [21/Oct/2026:23:13:49 +1100] "GET /?author=1 HTTP/1.1" ...
show more
angleseaarthouse.com.au:443 179.65.145.71 - - [21/Oct/2026:23:13:49 +1100] "GET /?author=1 HTTP/1.1" 404 187593 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-21 11:17:49
(1 day ago)
mareeshefford.com:443 179.65.145.71 - - [21/Oct/2026:22:17:48 +1100] "GET /?author=1 HTTP/1.1" 404 8 ...
show more
mareeshefford.com:443 179.65.145.71 - - [21/Oct/2026:22:17:48 +1100] "GET /?author=1 HTTP/1.1" 404 808 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-21 10:52:25
(1 day ago)
paulshipley.com.au:443 179.65.145.71 - - [21/Oct/2026:21:52:22 +1100] "GET /?author=1 HTTP/1.1" 404 ...
show more
paulshipley.com.au:443 179.65.145.71 - - [21/Oct/2026:21:52:22 +1100] "GET /?author=1 HTTP/1.1" 404 233301 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇬🇧
gigatech
2026-10-21 10:50:05
(1 day ago)
Webserver Probing
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 10:49:06
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 179.65.145.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:49:00.020801 2026] [security2:error] [pid 8353:tid 8353] [client 179.65.145.71:5331] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tckgbookkeeping.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tckgbookkeeping.biz"] [uri "/wp-json/wp/v2/users"] [unique_id "atiYnJHbEC_ZYKf83l1ubQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-21 10:17:38
(1 day ago)
rjryanpartners.com.au:443 179.65.145.71 - - [21/Oct/2026:21:17:37 +1100] "GET /?author=1 HTTP/1.1" 4 ...
show more
rjryanpartners.com.au:443 179.65.145.71 - - [21/Oct/2026:21:17:37 +1100] "GET /?author=1 HTTP/1.1" 404 808 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-21 09:44:12
(1 day ago)
stkildashule.org.au:443 179.65.145.71 - - [21/Oct/2026:20:44:10 +1100] "GET /?author=1 HTTP/1.1" 404 ...
show more
stkildashule.org.au:443 179.65.145.71 - - [21/Oct/2026:20:44:10 +1100] "GET /?author=1 HTTP/1.1" 404 53462 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
...
show less
Web App Attack