🇦🇺
MAGIC
2026-06-13 02:23:43
(2 days ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-20 21:27:15
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 199.96.165.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.96.165.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:27:12.061803 2026] [security2:error] [pid 7880:tid 7880] [client 199.96.165.239:38025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ideaofauniversity.website"] [uri "/wp-config.txt"] [unique_id "ag4nMB_aH3I4Gti64HFK7wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:45:14
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 199.96.165.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 199.96.165.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:45:06.889578 2026] [security2:error] [pid 801:tid 801] [client 199.96.165.239:23465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoneybluff.com"] [uri "/wp-config.php~"] [unique_id "ag2s0rV0NhNnXgfwkqZTvAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
sssrit
2026-05-18 09:54:35
(3 weeks ago)
199.96.165.239 - - [18/May/2026:11:54:34 +0200] "GET /wp-content/uploads/ HTTP/1.1" 403 548 "-" "Moz ...
show more
199.96.165.239 - - [18/May/2026:11:54:34 +0200] "GET /wp-content/uploads/ HTTP/1.1" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
2026-05-04 08:12:51
(1 month ago)
199.96.165.239 - - [04/May/2026:16:12:51 +0800] "GET /wp-config.php.old HTTP/1.1" 301 - "-" "Mozilla ...
show more
199.96.165.239 - - [04/May/2026:16:12:51 +0800] "GET /wp-config.php.old HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-27 21:30:56
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 199.96.165.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 199.96.165.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 16:30:30.917972 2026] [security2:error] [pid 689:tid 689] [client 199.96.165.239:32227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sacoriverjazz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sacoriverjazz.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaIM9uUP_JnT6rGNcUg55wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Mugen
2026-02-17 16:51:19
(3 months ago)
Unauthorized VPN login attempts
Brute-Force
🇺🇸
EchoGuard
2026-02-15 14:58:26
(3 months ago)
FortiGate SSL VPN login failures
VPN IP
Brute-Force
🇺🇸
fbarela
2026-02-13 05:00:15
(4 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇺🇸
[email protected]
2025-11-24 01:01:59
(6 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-11-24T01:01:59Z
Brute-Force
🇺🇸
[email protected]
2025-11-24 00:02:59
(6 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-11-24T00:02:59Z
Brute-Force
🇧🇪
taivas.nl
2025-08-16 01:02:10
(9 months ago)
Wordpress_xmlrpc_attack
Bad Web Bot