🇩🇪
LRob
2025-03-27 00:04:49
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
2025-03-25 21:55:19
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 20.7.168.7 (US/United States/-)
SQL Injection
🇺🇸
ipblock.com
2025-03-25 20:14:00
(1 year ago)
IPBlock protected site ID [4055-d][s=08].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-03-25 12:30:13
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
2025-03-25 11:05:03
(1 year ago)
Probing for Open Source CMS Components
Hacking
Brute-Force
2025-03-25 10:52:02
(1 year ago)
Bot / scanning and/or hacking attempts: GET /admin.php HTTP/1.1, GET /wp-includes/Text/Diff/Renderer ...
show more
Bot / scanning and/or hacking attempts: GET /admin.php HTTP/1.1, GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1, GET /wp-content/plugins/background-image-cropper/plugins.php HT, GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1, GET /.well-known/pki-validation/parx.php HTTP/1.1, GET /index/about.php HTTP/1.1, GET /wp-admin/user/content.php HTTP/1.1, GET /manager.php HTTP/1.1, GET /12wudscz.php HTTP/1.1, GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1, GET /wp-content/plugins/wp-login.php HTTP/1.1, GET /.well-known/pki-validation/about.php HTTP/1.1, GET /wp-admin/images/users.php HTTP/1.1, GET /wp-includes/random_compat/about.php HTTP/1.1, GET /wp-includes/Text/wp-conflg.php HTTP/1.1, GET /classwithtostring.php HTTP/1.1
show less
Hacking
Web App Attack
🇫🇷
dynamix
2025-03-25 10:50:29
(1 year ago)
Multiple WAF Violations
Web App Attack
🇨🇦
mitsurugi
2025-03-25 10:06:00
(1 year ago)
Probing for too many things.
Bad Web Bot
Web App Attack
🇦🇺
weblite
2025-03-25 09:09:04
(1 year ago)
WP_MALWARE_PROBE
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-03-25 08:15:02
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 20.7.168.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240000) triggered by 20.7.168.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 04:14:55.835200 2025] [security2:error] [pid 30289:tid 30289] [client 20.7.168.7:9187] [client 20.7.168.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||garrettkirkland.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "garrettkirkland.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-Jl_6E5dp7mudqtifFOGQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-25 07:42:56
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 20.7.168.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240000) triggered by 20.7.168.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 03:42:51.277206 2025] [security2:error] [pid 28378:tid 28378] [client 20.7.168.7:3645] [client 20.7.168.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||vecinosrestaurant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "vecinosrestaurant.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-Jee4w-duROPYOzjbar0gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2025-03-24 23:25:31
(1 year ago)
Multiple web server 400 error codes from same source ip 20.7.168.7.
Web App Attack
🇺🇸
TPI-Abuse
2025-03-24 23:16:02
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 20.7.168.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240000) triggered by 20.7.168.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 19:15:55.842193 2025] [security2:error] [pid 27198:tid 27198] [client 20.7.168.7:13700] [client 20.7.168.7] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||vtwins.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "vtwins.us"] [uri "/images/stories/admin-post.php"] [unique_id "Z-HnqzijyaBhkyK0kV_B1gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2025-03-24 22:52:29
(1 year ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
🇫🇷
pm33
2025-03-24 22:50:09
(1 year ago)
Unauthorized connections HTTP 403
Web App Attack