🇺🇸
William Cochran
2026-04-30 00:04:00
(1 month ago)
Password Spray on cloud account.
Brute-Force
Hacking
🇫🇷
dynamix
2025-10-22 06:04:50
(8 months ago)
Multiple WAF Violations
Web App Attack
🇬🇧
Mendip_Defender
2025-10-21 17:14:22
(8 months ago)
199.101.196.67 - - [21/Oct/2025:18:14:17 +0100] "GET /simple.php HTTP/1.0" 404 206 "-" "Mozilla/5.0 ...
show more
199.101.196.67 - - [21/Oct/2025:18:14:17 +0100] "GET /simple.php HTTP/1.0" 404 206 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
199.101.196.67 - - [21/Oct/2025:18:14:17 +0100] "GET /wp-admin/network/index.php HTTP/1.0" 404 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
199.101.196.67 - - [21/Oct/2025:18:14:17 +0100] "GET /inputs.php HTTP/1.0" 404 206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
...
show less
Hacking
Web App Attack
🇳🇱
exxos
2025-10-02 23:05:39
(8 months ago)
Attacks with Bad user agents
Hacking
🇳🇱
Mangelot Hosting
2025-09-21 01:53:36
(9 months ago)
(upload_shell) srv103 Shell upload 199.101.196.67 (US/United States/-): 1 in the last 3600 secs; Por ...
show more
(upload_shell) srv103 Shell upload 199.101.196.67 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
2025-09-20 22:01:26
(9 months ago)
Probing for Open Source CMS Components
Hacking
Brute-Force
🇫🇷
dynamix
2025-09-19 17:01:16
(9 months ago)
Multiple WAF Violations
Web App Attack
🇱🇻
garmtech.com
2025-09-19 11:28:20
(9 months ago)
IM360 WAF: Interaction with fake plugin MV:/wp-content/plugins/core-stab/
Web App Attack
🇱🇻
garmtech.com
2025-09-19 11:28:11
(9 months ago)
IM360 WAF: Block interaction with malicious plugin
Web App Attack
🇺🇸
TPI-Abuse
2025-08-06 12:27:15
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 06 08:27:10.440267 2025] [security2:error] [pid 18860:tid 18860] [client 199.101.196.67:47395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alextra.org"] [uri "/.env"] [unique_id "aJNKHo436SiBVHyecC2NYAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-06 11:03:20
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 06 07:03:16.716979 2025] [security2:error] [pid 12294:tid 12294] [client 199.101.196.67:64265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boat-registration-spain.com"] [uri "/.env"] [unique_id "aJM2dE9w6JD1YCgUuEtpHwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-06 06:39:29
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 06 02:39:21.850616 2025] [security2:error] [pid 16379:tid 16379] [client 199.101.196.67:38597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "awl-v.com"] [uri "/.env"] [unique_id "aJL4mcla3RZFPpi37YTTZwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-06 06:06:56
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 06 02:06:50.119064 2025] [security2:error] [pid 28076:tid 28076] [client 199.101.196.67:36735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matterofbritain.com"] [uri "/.env"] [unique_id "aJLw-iJ_7PU8UCbQ0_ApGgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-06 02:54:08
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 22:54:01.743688 2025] [security2:error] [pid 6151:tid 6151] [client 199.101.196.67:33391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jkperis.com"] [uri "/.env"] [unique_id "aJLDya42X-HkEpDxFk24lAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-05 23:48:55
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.101.196.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 19:48:52.216179 2025] [security2:error] [pid 28878:tid 28878] [client 199.101.196.67:65181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "littlehornengineering.com"] [uri "/.env"] [unique_id "aJKYZGww9FEnbiO9Sq5AEQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack