🇮🇹
LTM
2026-07-02 06:20:01
(6 days ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇨🇭
backslash
2026-07-02 04:12:02
(6 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
factor1
2026-07-02 01:51:25
(6 days ago)
Fail2ban at apollo Reports Abuse.
Bad Web Bot
🇫🇷
Octopuce
2026-07-02 01:26:49
(6 days ago)
Aggressive web search of vulnerable pages: /wp-content/themes/theme-check/main.php /wp-content/plugi ...
show more
Aggressive web search of vulnerable pages: /wp-content/themes/theme-check/main.php /wp-content/plugins/pwnd-1/pwnd.php /content.php /modules/sc ...
show less
Web App Attack
🇬🇧
consul.to
2026-07-01 21:48:28
(6 days ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇭
Origon
2026-07-01 20:30:39
(6 days ago)
http-wordpress-scan - IP: 191.96.146.86 - time="2026-07-01T22:30:38+02:00" level=info msg="(555f66b ...
show more
http-wordpress-scan - IP: 191.96.146.86 - time="2026-07-01T22:30:38+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 191.96.146.86 (GR/212238) : 4h ban on Ip 191.96.146.86" module=db
show less
Web App Attack
🇱🇻
garmtech.com
2026-05-10 20:22:32
(1 month ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
2026-05-04 12:23:15
(2 months ago)
Web App Attack, Hacking
Hacking
Web App Attack
2026-04-14 07:47:47
(2 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 17:48:44
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 191.96.146.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 191.96.146.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 13:48:40.388447 2026] [security2:error] [pid 6913:tid 6913] [client 191.96.146.86:23447] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||brazilianbikinis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brazilianbikinis.com"] [uri "/old/dump.sql"] [unique_id "abhCeEz0lY8ikjL_23IN5AAAAGs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 15:56:56
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 191.96.146.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 191.96.146.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 11:56:50.963909 2026] [security2:error] [pid 30717:tid 30717] [client 191.96.146.86:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sportsbookcommission.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sportsbookcommission.com"] [uri "/back/backup.sql"] [unique_id "abgoQiz-b34nPJ803od-0QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 04:40:42
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 191.96.146.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 191.96.146.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 00:40:35.623287 2026] [security2:error] [pid 3700544:tid 3700544] [client 191.96.146.86:35529] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kwtlaw.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kwtlaw.com"] [uri "/bak/www.sql"] [unique_id "abY4QzKTy6ON702IsmKSRQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 07:47:01
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 191.96.146.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 191.96.146.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 03:46:58.509156 2026] [security2:error] [pid 17614:tid 17623] [client 191.96.146.86:50029] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ethniclivesmatter.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ethniclivesmatter.com"] [uri "/bak/backup.sql"] [unique_id "abUScgkZDdRcoZ3QTX5uJAAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-03-14 01:02:51
(3 months ago)
10 attempts against mh-misc-ban on frost
Web App Attack
🇩🇪
R.G.
2026-02-23 10:36:33
(4 months ago)
(ScanningForFiles) Scanning for files triggerd 191.96.146.86 (GR/Greece/-): 10 in the last 900 secs; ...
show more
(ScanningForFiles) Scanning for files triggerd 191.96.146.86 (GR/Greece/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack