2025-04-29 19:06:07
(1 year ago)
Trying to access config files
Web App Attack
🇺🇸
techmipro
2025-04-29 14:03:00
(1 year ago)
Failed Anti-bot protection test 100+ times
DDoS Attack
🇺🇸
TPI-Abuse
2025-04-28 02:52:07
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md ...
show more
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 22:52:01.490561 2025] [security2:error] [pid 12179:tid 12179] [client 185.153.197.227:60898] [client 185.153.197.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idledog.com"] [uri "/.git/config"] [unique_id "aA7tUSnNbso6GF0zNFlsFgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-04-26 01:49:51
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/26/2025 1:49 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇮🇹
Samsteve169
2025-04-25 23:04:00
(1 year ago)
Received DDoS attack through Cloudflare
DDoS Attack
2025-04-23 01:53:28
(1 year ago)
Web Attack Sitecore Experience Platform Deserialization Vulnerability
Web App Attack
🇺🇸
TPI-Abuse
2025-04-22 18:29:20
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md ...
show more
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 14:29:16.857237 2025] [security2:error] [pid 2084321:tid 2084321] [client 185.153.197.227:35548] [client 185.153.197.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "braunhausmedia.com"] [uri "/wp-config.php.new2022"] [unique_id "aAff_JorBbrx1G9QrubH7wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
COMPLEX
2025-04-20 05:48:51
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from T1.
Action taken: BLOCK
ASN: 56380 (AS-ITFRUIT)
Protocol: HTT ...
show more
Triggered Cloudflare WAF (l7ddos) from T1.
Action taken: BLOCK
ASN: 56380 (AS-ITFRUIT)
Protocol: HTTP/2 (GET method)
Timestamp: 2025-04-20T05:47:25Z
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-04-19 21:16:22
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md ...
show more
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 17:16:16.984312 2025] [security2:error] [pid 1292128:tid 1292128] [client 185.153.197.227:43058] [client 185.153.197.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.johneiden.com"] [uri "/.git/config"] [unique_id "aAQSoArYVLW4WL-M0FUCAQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-17 02:13:17
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md ...
show more
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 16 22:13:12.675581 2025] [security2:error] [pid 11801:tid 11939] [client 185.153.197.227:51056] [client 185.153.197.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockabyecotons.com"] [uri "/wp-config.php3"] [unique_id "aABjuH_O8ZlElLSy1VirtQAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-04-16 12:02:13
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-04-15 00:15:28
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md ...
show more
(mod_security) mod_security (id:210492) triggered by 185.153.197.227 (server-185-153-197-227.root.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 20:15:19.766359 2025] [security2:error] [pid 9752:tid 9752] [client 185.153.197.227:45538] [client 185.153.197.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "interiorsolutions-stuart.com"] [uri "/.git/config"] [unique_id "Z_2lF18oQ5Nwp3SHC5ct7QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2025-04-13 18:19:12
(1 year ago)
Form spam
Web Spam
🇩🇪
LRob
2025-04-13 08:30:10
(1 year ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2025-03-31 15:07:07
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH