🇫🇷
dynamix
2026-07-21 08:55:35
(4 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 19:05:58
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 15:05:54.254179 2026] [security2:error] [pid 4946:tid 4946] [client 193.37.32.7:36015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travel.enchantmenttours.com"] [uri "/wp-includes/wp-config.php"] [unique_id "al5xkiOa_gMElkF3ZplolQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-07-13 19:50:56
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-07-13 19:39:13
(1 week ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇦🇹
Pingger Shikkoken
2026-07-13 13:17:00
(1 week ago)
2026-07-13T13:17:00+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ...
show more
2026-07-13T13:17:00+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=193.37.32.7 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=29403 DF PROTO=TCP SPT=53459 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-13T13:17:01+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=193.37.32.7 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=29404 DF PROTO=TCP SPT=53459 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-13T13:17:03+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=193.37.32.7 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=29405 DF PROTO=TCP SPT=53459 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
2026-07-07 21:33:23
(2 weeks ago)
Banned by Fail2Ban on server
Web App Attack
2026-07-07 15:00:58
(2 weeks ago)
[server.tmg.gr] httpd-suspicious-path: sites=www.aidshep2017.gr; logs=/var/log/httpd/domains/aidshep ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=www.aidshep2017.gr; logs=/var/log/httpd/domains/aidshep2017.gr.log; samples=/wp-includes/sitemaps/admin.php | /wp-includes/assets/config.php | /wp-content/includes.php
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-07-06 19:53:05
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇷🇺
DZBOT
2026-07-06 01:36:23
(2 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
2026-07-06 00:45:46
(2 weeks ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇪
paissangroup
2026-07-05 18:12:14
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇩🇪
ghostwarriors
2026-07-05 04:50:32
(2 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 02:55:08
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 22:55:03.949828 2026] [security2:error] [pid 13281:tid 13281] [client 193.37.32.7:27371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oogeothermal.com"] [uri "/wp-includes/wp-config.php"] [unique_id "aknHh88BiqScoW6sA9BpJQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-04 20:35:16
(2 weeks ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 20:04:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 16:04:16.925993 2026] [security2:error] [pid 7718:tid 7718] [client 193.37.32.7:39251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mrccertification.com"] [uri "/wp-includes/images/wp-config.php"] [unique_id "aklnQAETSlhWy05LXbJhDQAAAAU"], referer: http://mrccertification.com/wp-includes/images/wp-config.php
show less
Brute-Force
Bad Web Bot
Web App Attack