2025-12-12 13:15:41
(10 months ago)
Blocked: Reason='Auto-block via DW'; Requests=0
Hacking
🇳🇱
Simone
2025-12-09 13:19:00
(10 months ago)
Web App Attack
🇺🇦
URAN Publishing Service
2025-12-09 05:43:30
(10 months ago)
188.166.191.110 - - [09/Dec/2025:07:43:27 +0200] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 4 ...
show more
188.166.191.110 - - [09/Dec/2025:07:43:27 +0200] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 272 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
188.166.191.110 - - [09/Dec/2025:07:43:29 +0200] "GET /wp-content/flame.php HTTP/1.1" 404 272 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
...
show less
Web App Attack
🇺🇸
jormaster3k
2025-12-09 03:32:49
(10 months ago)
Attack against Apache (too many 404s)
Web App Attack
🇮🇩
Burayot
2025-12-08 07:31:18
(10 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 188.166.191.110 (SG/Singapore/-): 1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 188.166.191.110 (SG/Singapore/-): 1 in the last 3600 secs
show less
Web App Attack
🇸🇬
Cloudkul Cloudkul
2025-12-08 01:53:19
(10 months ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 21:24:42
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 188.166.191.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 188.166.191.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 16:24:35.179310 2025] [security2:error] [pid 14639:tid 14639] [client 188.166.191.110:59703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidocchino.com"] [uri "/wp-config.php"] [unique_id "aTXwk7GPnXAGZcVhwcgw6AAAACE"], referer: www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-07 18:56:14
(10 months ago)
*Port Scan* detected from 188.166.191.110 (SG/Singapore/-). 5 hits in the last 0 seconds
Port Scan
Brute-Force
🇺🇸
jormaster3k
2025-12-07 18:26:03
(10 months ago)
Attack against Apache (too many 404s)
Web App Attack
🇸🇪
KIDOS
2025-12-07 05:03:30
(10 months ago)
CrowdSec detected malicious activity
DDoS Attack
🇳🇿
Antinson
2025-12-07 04:08:46
(10 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
2025-12-07 03:35:54
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-12-07 03:35:05
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 188.166.191.110 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 188.166.191.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 22:35:00.501647 2025] [security2:error] [pid 1920:tid 1920] [client 188.166.191.110:51024] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||socialstudiesforkids.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "socialstudiesforkids.com"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "aTT15EHMpuC6KknLZnbROQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2025-12-07 03:24:52
(10 months ago)
180 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
🇺🇦
URAN Publishing Service
2025-12-07 03:15:26
(10 months ago)
188.166.191.110 - - [07/Dec/2025:05:09:08 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla ...
show more
188.166.191.110 - - [07/Dec/2025:05:09:08 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
188.166.191.110 - - [07/Dec/2025:05:15:25 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
...
show less
Web App Attack