π·π΄
gtheo99
2026-07-22 07:35:40
(2 months ago)
Abuse of compromised WHM root API token (name: whmcs) on cpanel1.teron.ro β 887 unauthorized root-le ...
show more
Abuse of compromised WHM root API token (name: whmcs) on cpanel1.teron.ro β 887 unauthorized root-level API calls 2024-04..2026-07, including bulk password changes on 27 hosting accounts. Root-level compromise.
show less
Brute-Force
Web App Attack
Hacking
Anonymous
2025-11-18 06:20:11
(10 months ago)
scanning http requests from known botnet
Web App Attack
π³π±
exxos
2025-09-21 03:05:31
(1 year ago)
Attacks with Bad user agents
Hacking
πͺπΈ
Global Cyber Police
2025-07-28 06:47:55
(1 year ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-06-11 03:54:55
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
π©πͺ
BestFans.com
2024-04-10 17:03:22
(2 years ago)
Credential brute-force attacks on webpage logins
Brute-Force
πΊπΈ
TPI-Abuse
2024-04-04 07:34:15
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 04 03:30:44.509439 2024] [security2:error] [pid 10203] [client 199.33.69.24:50480] [client 199.33.69.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.furryfriendzy.org"] [uri "/wp-config.php~1"] [unique_id "Zg5XJMtb9MEFghJDLraD6QAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-03-01 22:25:29
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 01 17:25:22.454147 2024] [security2:error] [pid 19845] [client 199.33.69.24:53586] [client 199.33.69.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uniqpresence.com"] [uri "/.git/config"] [unique_id "ZeJV0ufNd8EbK5EKrSAkqwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
i-turnradio.nl
2024-03-01 17:51:12
(2 years ago)
2024-03-01 @ 18:51:12 (CET) ~ Blocked for trying to access: /mail/config-v1.1.xml?emailaddress=wijbe ...
show more
2024-03-01 @ 18:51:12 (CET) ~ Blocked for trying to access: /mail/[email protected]
show less
Web App Attack
πΊπΈ
TPI-Abuse
2024-02-25 10:18:13
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 25 05:18:08.297630 2024] [security2:error] [pid 32340] [client 199.33.69.24:37330] [client 199.33.69.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beetreelabs.com"] [uri "/.git/config"] [unique_id "ZdsT4B9aHcy5ODDadZW2jwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-02-19 15:36:09
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 19 10:36:04.776274 2024] [security2:error] [pid 14591] [client 199.33.69.24:41312] [client 199.33.69.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inspiringindividualindustry.com"] [uri "/.git/config"] [unique_id "ZdN1ZEV28sWhI5EyJYwOkgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§π·
sawyerwill
2024-02-16 15:40:00
(2 years ago)
Password Spray
Hacking
SQL Injection
Brute-Force
Web App Attack
SSH
πΊπΈ
TPI-Abuse
2024-02-14 22:36:33
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 199.33.69.24 (199-33-69-24.eze.as54138.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 14 17:36:27.057170 2024] [security2:error] [pid 27232] [client 199.33.69.24:35882] [client 199.33.69.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grancanariaholidays.com"] [uri "/.git/config"] [unique_id "Zc1AawsqPOfEFS1E1l9-VwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¨π¦
wil.com
2024-01-25 02:12:30
(2 years ago)
GlobalProtect login attempts with user rdiaz.
VPN IP
Brute-Force
π©πͺ
Packets-Decreaser.NET
2024-01-20 18:47:37
(2 years ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam