🇳🇱
exxos
2025-09-23 19:03:01
(9 months ago)
Attacks with Bad user agents
Hacking
🇺🇸
xmission.com
2025-08-18 13:33:20
(10 months ago)
Blocked by UFW (TCP on 6881)
Source port: 41991
TTL: 50
Packet length: 60
TOS: 0x08
This report (fo ...
show more
Blocked by UFW (TCP on 6881)
Source port: 41991
TTL: 50
Packet length: 60
TOS: 0x08
This report (for 207.204.248.230) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇪🇸
10dencehispahard SL
2024-06-28 18:07:48
(1 year ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
2024-06-26 01:42:32
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-06-24 22:26:26
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
SiliSoftware
2024-06-24 20:30:17
(1 year ago)
/wp-json/?rest_route=/wp/v2/USERS
Web App Attack
🇺🇸
woof
2024-06-24 17:54:36
(1 year ago)
This IP accessed a banned path "/wp-json/" with User Agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64 ...
show more
This IP accessed a banned path "/wp-json/" with User Agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 Edg/89.0.774.76". (ListenCaddy)
show less
Bad Web Bot
Web App Attack
🇬🇧
findlab
2024-06-21 11:20:01
(2 years ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
2024-06-21 09:29:42
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-06-20 06:21:59
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-03-02 00:11:54
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 207.204.248.230 (230.248.204.207.client.dyn.str ...
show more
(mod_security) mod_security (id:210492) triggered by 207.204.248.230 (230.248.204.207.client.dyn.strong-sf37.as22781.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 01 19:11:47.296089 2024] [security2:error] [pid 9080] [client 207.204.248.230:46862] [client 207.204.248.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baselineledsolutions.com"] [uri "/.git/config"] [unique_id "ZeJuww2bZThbf95VdFG5LQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
John Hencke
2024-02-29 00:00:00
(2 years ago)
Brute Force Attack on Citrix Netscaler. Attempts: 1
Brute-Force
🇺🇸
TPI-Abuse
2023-12-14 06:13:30
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 207.204.248.230 (230.248.204.207.client.dyn.str ...
show more
(mod_security) mod_security (id:225170) triggered by 207.204.248.230 (230.248.204.207.client.dyn.strong-sf37.as22781.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 14 01:13:22.650668 2023] [security2:error] [pid 19632] [client 207.204.248.230:51753] [client 207.204.248.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||baker15.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "baker15.com"] [uri "/wp/wp-json/wp/v2/users/"] [unique_id "ZXqdAuX92sFAWENigH_bHQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-13 20:08:32
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 207.204.248.230 (230.248.204.207.client.dyn.str ...
show more
(mod_security) mod_security (id:225170) triggered by 207.204.248.230 (230.248.204.207.client.dyn.strong-sf37.as22781.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 13 15:08:21.999834 2023] [security2:error] [pid 2433487:tid 46916222080768] [client 207.204.248.230:45047] [client 207.204.248.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ogier.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ogier.us"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "ZXoPNfvYbxLwmHcyjZNqXAAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SimonSays
2023-12-13 07:30:07
(2 years ago)
Distributed brute-force attack, login failed user richie
VPN IP
Hacking
Brute-Force