🇦🇺
MAGIC
2026-06-13 01:05:46
(1 week ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-11 19:22:38
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 199.96.164.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 199.96.164.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 15:22:33.668182 2026] [security2:error] [pid 18152:tid 18152] [client 199.96.164.157:56111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||horseillustration.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "horseillustration.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aisK-UsfTDDbxLTnQAlc4AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-05-31 21:20:02
(2 weeks ago)
2026/05/31 21:15:06 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇨🇿
ptlab
2026-05-20 14:45:38
(1 month ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇱🇻
garmtech.com
2026-05-15 22:53:14
(1 month ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
🇮🇩
hermawan
2026-05-03 20:03:21
(1 month ago)
1777835259.213915 199.96.164.157 103.166.156.58 46720_2-4-8-1-3_1460_11 2026-05-04 02:07:39 WIB
...
Email Spam
Hacking
🇬🇧
Oakley
2026-05-03 10:55:42
(1 month ago)
(confirmed_bot_sig) Confirmed bot
Hacking
2026-04-22 18:32:50
(1 month ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-03-14 10:13:42
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 199.96.164.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 199.96.164.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:13:36.913252 2026] [security2:error] [pid 9567:tid 9567] [client 199.96.164.157:51659] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Damage/Thumbs.db"] [unique_id "abU00GHXLqWRhQxXl2ZCTQAAAAs"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Damage/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-12 09:57:05
(3 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇫🇷
Kenshin869
2026-02-04 17:40:18
(4 months ago)
Wordpress unauthorized access attempt
Brute-Force
🇺🇸
mind5t0rm
2026-02-04 12:15:53
(4 months ago)
(XMLRPC) WP XMLPRC Attack 199.96.164.157 (US/United States/-): 3 in the last 3600 secs; Ports: *; Di ...
show more
(XMLRPC) WP XMLPRC Attack 199.96.164.157 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 199.96.164.157 - - [04/Feb/2026:19:15:49 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4"
199.96.164.157 - - [04/Feb/2026:19:15:50 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/8.6.0"
199.96.164.157 - - [04/Feb/2026:19:15:51 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4"
show less
Port Scan
🇩🇪
HandyTreff.de
2026-01-27 01:25:34
(4 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -34.096 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -34.096 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1974.8
show less
Bad Web Bot
Web App Attack
2026-01-12 21:44:00
(5 months ago)
CMDI Score: 3 | Issues: [{"source":"GET","key":"param","type":"cmdi","pattern":"operator-with-comma ...
show more
CMDI Score: 3 | Issues: [{"source":"GET","key":"param","type":"cmdi","pattern":"operator-with-command","sample":"&(nslookup${IFS}-q${IFS}cname${IFS}hitcwwlwgnhil56a7f.bxss.me||curl${IFS}hitcwwlwgnhil56a7f.bxss.me)&'\\\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitcww..."}]
show less
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-01-12 08:30:21
(5 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot