🇺🇸
TPI-Abuse
2026-06-15 07:02:17
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 216.24.210.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 216.24.210.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:02:13.027947 2026] [security2:error] [pid 31106:tid 31106] [client 216.24.210.107:25757] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.mympizzas.com.mx|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.mympizzas.com.mx"] [uri "/spamlog.log"] [unique_id "ai-jdRAeRLdRl7rWQSpzAQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 20:23:24
(1 day ago)
(mod_security) mod_security (id:240000) triggered by 216.24.210.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 216.24.210.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:23:15.984439 2026] [security2:error] [pid 10802:tid 10802] [client 216.24.210.107:36413] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||portraitsinblues.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "portraitsinblues.com"] [uri "/images/stories/themes.php"] [unique_id "ai8Ns2ttEYopU_QkRsCFGQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 06:46:48
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 216.24.210.107 (US/United States/-)
SQL Injection
2026-06-14 00:18:31
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
2026-06-11 05:16:03
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 216.24.210.107 (US/United States/-)
SQL Injection
2026-06-10 16:30:35
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇺🇸
TPI-Abuse
2026-06-08 12:12:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 216.24.210.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.24.210.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 08:12:15.302319 2026] [security2:error] [pid 12542:tid 12542] [client 216.24.210.107:58559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eydebrothers.com"] [uri "/wp-content/uploads/wp-config.php"] [unique_id "aiaxn4Wy33eol5HYZPH5QgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-07 06:54:13
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-06-06 20:19:54
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
LRob.fr
2026-06-06 10:45:14
(1 week ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇩🇪
Petros Stefanakis
2026-06-06 09:00:55
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 216.24.210.107 (US/United States/-)
SQL Injection
2026-06-06 08:17:14
(1 week ago)
[redacted] 216.24.210.107 - - [06/Jun/2026:10:17:03 +0200] "GET /wp-admin/maint/network/ HTTP/1.1" 4 ...
show more
[redacted] 216.24.210.107 - - [06/Jun/2026:10:17:03 +0200] "GET /wp-admin/maint/network/ HTTP/1.1" 404 196 "http://[redacted]/wp-admin/maint/network/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
[redacted] 216.24.210.107 - - [06/Jun/2026:10:17:06 +0200] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 196 "http://[redacted]/wp-admin/css/colors/midnight/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
[redacted] 216.24.210.107 - - [06/Jun/2026:10:17:06 +0200] "GET /wp-admin/admin.php HTTP/1.1" 404 196 "http://[redacted]/wp-admin/admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
[redacted] 216.24.210.107 - - [06/Jun/2026:10:17:08 +0200] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 404 196 "http://[redacted]/wp-admin/css/colors/ectoplasm/" "Mozilla/5.0 (Windows NT 1
...
show less
Hacking
Web App Attack
🇬🇧
consul.to
2026-06-04 20:14:39
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
LRob.fr
2026-06-03 14:15:10
(1 week ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-05-30 13:10:45
(2 weeks ago)
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-196)
show less
Bad Web Bot