🇺🇸
TPI-Abuse
2026-10-05 03:24:55
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 191.102.129.240 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 191.102.129.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 23:24:50.731804 2026] [security2:error] [pid 11583:tid 11583] [client 191.102.129.240:41403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gulftelecom.com"] [uri "/.git/HEAD"] [unique_id "asMYgtnUbZ9DUuE6nUcKgAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 11:03:19
(2 months ago)
FortiWeb WAF: 30 attacks detected. Threat Score: 10857055. Types: Client Management(15), Signature D ...
show more
FortiWeb WAF: 30 attacks detected. Threat Score: 10857055. Types: Client Management(15), Signature Detection(15). Origin: United States.
show less
Web App Attack
2026-07-22 00:25:36
(2 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-07-16 14:53:46
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-53.191.102.129.240.web-spam ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-53.191.102.129.240.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2026-07-16 14:53:46
(2 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:/ru/component/users/
Web App Attack
🇱🇻
garmtech.com
2026-07-11 21:18:17
(2 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
2026-07-09 15:13:52
(2 months ago)
Spam registration attempt on forum.
Web Spam
Blog Spam
🇱🇻
garmtech.com
2026-07-03 10:17:12
(3 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇱🇻
garmtech.com
2026-07-01 16:27:58
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-27.191.102.129.240.web-spam ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-27.191.102.129.240.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇦🇺
MAGIC
2026-06-21 01:47:27
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇪🇸
el-brujo
2026-06-18 17:42:39
(3 months ago)
Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Moz ...
show more
Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Action: managed_challenge Source: firewallCustom ASN Description: WhiteLabelColo Country: US Method: POST Timestamp: 2026-06-18T17:42:39Z ruleId: 5012d84c6d9f467499149a3cd38d0b9d. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-06-18 07:49:56
(3 months ago)
Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Moz ...
show more
Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: WhiteLabelColo Country: US Method: POST Timestamp: 2026-06-18T07:49:56Z ruleId: 5012d84c6d9f467499149a3cd38d0b9d. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-06-18 07:29:43
(3 months ago)
Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Moz ...
show more
Cloudflare WAF: Request Path: /register2.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: WhiteLabelColo Country: US Method: POST Timestamp: 2026-06-18T07:29:43Z ruleId: 5012d84c6d9f467499149a3cd38d0b9d. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-06-18 00:40:50
(3 months ago)
Cloudflare WAF: Request Path: /wp-login.php Request Query: ?action=register Host: hwagm.elhacker.net ...
show more
Cloudflare WAF: Request Path: /wp-login.php Request Query: ?action=register Host: hwagm.elhacker.net userAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 Action: challenge Source: firewallCustom ASN Description: WhiteLabelColo Country: US Method: GET Timestamp: 2026-06-18T00:40:50Z ruleId: a87605f6302a4b8fb500fa67a9740889. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇭🇺
bcsaba
2026-06-17 21:56:36
(3 months ago)
Joomla spam
191.102.129.240 - - [17/Jun/2026:23:56:35 +0200] "GET /index.php?option=com_easyblog&vie ...
show more
Joomla spam
191.102.129.240 - - [17/Jun/2026:23:56:35 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://*REDACTED*/index.php/kozerdeku" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
show less
Web App Attack
