🇱🇻
garmtech.com
2026-05-15 21:28:48
(4 weeks ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
🇦🇺
MAGIC
2026-05-10 00:16:37
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-01 01:15:31
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 21:15:27.371995 2026] [security2:error] [pid 20567:tid 20567] [client 212.119.41.76:35447] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zabyte.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zabyte.net"] [uri "/wp-json/wp/v2/users"] [unique_id "afP-r5Kw-JYz77EYjdsm1wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 14:07:48
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 10:07:41.922339 2026] [security2:error] [pid 9612:tid 9612] [client 212.119.41.76:36521] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theyoungstrategist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theyoungstrategist.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afNiLXh2T2EvikXXa9S4SwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 01:12:21
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 21:12:16.859753 2026] [security2:error] [pid 18295:tid 18295] [client 212.119.41.76:51455] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.backsport.backstore.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.backsport.backstore.com"] [uri "/memory/bed-mattress.htm"] [unique_id "afKscM0K7XGoZZrYkv1m8QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 18:16:17
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 14:16:09.999955 2026] [security2:error] [pid 32076:tid 32076] [client 212.119.41.76:27511] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||primacomm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "primacomm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeph6fy55iJouY2TCSd9lgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-29 20:58:16
(2 months ago)
attempts to hack passwords
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 07:38:02
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.41.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 03:37:57.343987 2026] [security2:error] [pid 10644:tid 10644] [client 212.119.41.76:13889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||artsun.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "artsun.com"] [uri "/"] [unique_id "ab-cVW0Q0BQsieRh0tz-gwAAAAs"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-01-29 10:23:06
(4 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.49 (Bad < -10 / Very Bad < -20 / ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.49 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2784.1
show less
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-01-21 18:54:32
(4 months ago)
212.119.41.76 - - [21/Jan/2026:19:54:31 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
212.119.41.76 - - [21/Jan/2026:19:54:31 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇬🇧
Steve
2025-12-22 03:55:38
(5 months ago)
Abuse of XMLRPC
Brute-Force
Web App Attack
🇦🇺
oncord
2025-12-17 00:33:12
(5 months ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2025-11-26 11:03:40
(6 months ago)
(From [email protected] ) Hi,
Your website is losing customers.
Your homepage is silent. Yo ...
show more
(From [email protected] ) Hi,
Your website is losing customers.
Your homepage is silent. Your competitors aren’t.
Customers today don’t click around —
they ask and expect answers instantly.
Add a FREE AI agent to your site that talks to your visitors, explains your business, and captures leads — 24/7.
No cost. No tech. 2-minute setup.
Claim your free AI homepage agent → https://www.olleh.ai
Need help? Contact [email protected]
Best Regards,
Anja Grey
Should you prefer not to get subsequent messages from this campaign, simply fill the form at bit. ly/fillunsubform with your domain address (URL).
Luebecker Strasse 57, Greenfield, CA, USA, 94832
show less
Phishing
Web Spam
🇨🇭
backslash
2025-11-17 21:55:07
(6 months ago)
block ruleset 1E8A9918B1655D0828F2EEF05553DD2681055C9A
Web Spam
🇦🇺
oncord
2025-11-16 06:25:45
(6 months ago)
Form spam
Web Spam