🇫🇷
LRob.fr
2026-06-06 17:00:03
(6 hours ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇪🇸
10dencehispahard SL
2026-01-26 09:47:01
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇨🇭
backslash
2026-01-24 18:20:04
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-12-30 16:25:04
(5 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇮🇹
VHosting
2025-12-30 02:55:11
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:45
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
kosada.com
2025-11-28 06:35:57
(6 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2025-11-26 08:46:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:46:05.775580 2025] [security2:error] [pid 31877:tid 31877] [client 209.50.181.68:35965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.firewoodart.com"] [uri "/.git/HEAD"] [unique_id "aSa-TR3K2mlyzaKwGCku4gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:17:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:17:14.091382 2025] [security2:error] [pid 15072:tid 15072] [client 209.50.181.68:10021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.oximoron.com"] [uri "/.svn/wc.db"] [unique_id "aSaNWoA9dDVHqj7_BAgF4QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:14:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:11:59.148916 2025] [security2:error] [pid 4601:tid 4601] [client 209.50.181.68:58311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ngmweb.com"] [uri "/.git/HEAD"] [unique_id "aSQTT-gAawATDx3w5Re4nAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 00:24:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:24:16.441270 2025] [security2:error] [pid 5238:tid 5238] [client 209.50.181.68:37861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.larryodean.com"] [uri "/.svn/wc.db"] [unique_id "aSOlsDnsvSMmNqWvn_JapgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2025-11-11 17:55:10
(6 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇧🇪
cmbplf
2025-10-17 16:26:28
(7 months ago)
4.794 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2025-10-16 15:35:04
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 209.50.181.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 11:34:56.212129 2025] [security2:error] [pid 28487:tid 28487] [client 209.50.181.68:43151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||caymancline.com:80|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "caymancline.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPEQoObGHTpfQ6QJS0TptQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2025-10-13 02:35:16
(7 months ago)
(From [email protected] ) 3 clicks instead of 30 tools. Delegate the grind to AI and keep the ...
show more
(From [email protected] ) 3 clicks instead of 30 tools. Delegate the grind to AI and keep the profit https://www.youtube.com/watch?v=GY1x2NWs9EA
show less
Phishing
Web Spam