🇩🇪
Oakley
2026-05-17 08:02:07
(1 month ago)
(mod_security) mod_security (id:900210) triggered by 199.96.166.118 (US/United States/-): 5 in the l ...
show more
(mod_security) mod_security (id:900210) triggered by 199.96.166.118 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
2026-05-02 14:02:34
(1 month ago)
Aggressive web scan
Web App Attack
2026-04-09 21:15:36
(2 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
🇪🇸
el-brujo
2026-02-24 12:10:47
(3 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:140.0) Gecko/20100101 Firefox/140.0 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-02-24T12:10:47Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇳🇱
donarev419
2026-02-22 00:03:46
(4 months ago)
Connection to port 13443 with data transfer.
Data preview:
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-02-08 23:09:12
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 199.96.166.118 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 199.96.166.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 18:09:06.213110 2026] [security2:error] [pid 8187:tid 8187] [client 199.96.166.118:59201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||scottcampbellconstruction.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "scottcampbellconstruction.com"] [uri "/contactus.htm"] [unique_id "aYkXkgvSeJ2_tYuYAGUNEQAAAAo"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tilellit.pro
2026-02-05 13:54:27
(4 months ago)
Fail2Ban banned 199.96.166.118 for security violations in jail wp-armour. Log: 2026/02/05 13:54:26 [ ...
show more
Fail2Ban banned 199.96.166.118 for security violations in jail wp-armour. Log: 2026/02/05 13:54:26 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 199.96.166.118 | Target: wplogin" , client: 199.96.166.118, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇪🇸
el-brujo
2026-02-05 13:35:51
(4 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:146.0) Gecko/20100101 Firefox/146.0 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-02-05T13:35:51Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇩🇪
MusicLibrary
2026-02-05 12:12:03
(4 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇺🇸
nowyouknow
2025-12-22 19:04:58
(5 months ago)
(From [email protected] ) Hey Team,
I’m writing because I found your site on Page 2 for yo ...
show more
(From [email protected] ) Hey Team,
I’m writing because I found your site on Page 2 for your main keywords.
Frankly, it makes me frustrated. Your website is much better than the guys ranking #1, but they are getting all the traffic.
You are basically donating your customers to them for free, just because of some technical SEO issues.
I have the data in front of me showing exactly why Google is favoring them over you.
I’d love to walk you through the fix.
Do you have availability this week for a brief call?
Cheers,
QIK 10x Growth
show less
Phishing
Web Spam
🇳🇱
i-turnradio.nl
2025-12-21 11:49:48
(6 months ago)
2025-12-21 @ 12:49:47 (CET) ~ Blocked for trying to access: /xmlrpc.php
Web App Attack
🇱🇻
garmtech.com
2025-12-02 00:11:47
(6 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇺🇸
[email protected]
2025-10-17 00:07:29
(8 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-10-17T00:07:29Z
Brute-Force
🇹🇷
pamircil
2025-09-23 03:11:14
(8 months ago)
🍯 WinnieThePooh Honeypot : GET request to '/wp-config.copy' on (http/80)💀
Hacking
Brute-Force
SSH
🇧🇷
hostseries
2025-09-16 21:32:48
(9 months ago)
Trigger: LF_DISTATTACK
Brute-Force