🇩🇪
LRob.fr
2026-06-23 22:30:31
(5 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-06-20 03:14:03
(1 week ago)
Web App Attack
Web App Attack
🇧🇪
cmbplf
2026-03-15 12:26:12
(3 months ago)
2.054 POST requests with url.path */wp-login.php
1.814 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-06 05:53:07
(4 months ago)
(mod_security) mod_security (id:217280) triggered by 209.50.171.137 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:217280) triggered by 209.50.171.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 00:53:01.653236 2026] [security2:error] [pid 25831:tid 25831] [client 209.50.171.137:19361] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||digitalmarketing-group.com|F|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "digitalmarketing-group.com"] [uri "/scripts/form-1234-9ea1.php"] [unique_id "aYWBvekZwmyeXXAwr4SBRAAAABA"], referer: https://digitalmarketing-group.com/Home.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-01-26 01:54:01
(5 months ago)
Form spam
Web Spam
2025-12-30 08:35:20
(5 months ago)
"GET /.aws/credentials HTTP/1.1"
Hacking
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:11
(6 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-29 11:55:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.137 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:55:34.172383 2025] [security2:error] [pid 2865787:tid 2865806] [client 209.50.171.137:42329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fixatron.com"] [uri "/.svn/wc.db"] [unique_id "aVJsNpyqIHY7ymJpK4UV0gAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 08:29:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.137 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:28:56.603406 2025] [security2:error] [pid 21204:tid 21204] [client 209.50.171.137:12505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimwilsongallery.com"] [uri "/.env"] [unique_id "aVI7yBcSQ6BxBTdVWWdXaQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 05:40:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.137 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:40:18.062564 2025] [security2:error] [pid 13587:tid 13587] [client 209.50.171.137:18169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "styxwetworld.com"] [uri "/.git/HEAD"] [unique_id "aVIUQigmz6bR3RR79QUKsgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-29 04:28:53
(6 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇦🇺
oncord
2025-12-25 08:23:30
(6 months ago)
Form spam
Web Spam
🇮🇹
VHosting
2025-12-24 05:50:18
(6 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-11 14:26:54
(6 months ago)
botnet
DDoS Attack
🇦🇺
oncord
2025-12-10 13:05:28
(6 months ago)
Form spam
Web Spam