🇲🇽
octageeks.com
2026-08-24 04:39:01
(4 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇮🇹
VHosting
2026-08-22 12:10:05
(6 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇦🇹
neo72
2026-08-22 06:29:56
(6 days ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-08-17 04:44:14
(1 week ago)
Web App Attack
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-22 23:05:51
(2 months ago)
[Tue Jun 23 09:05:50.428525 2026] [security2:error] [pid 175134] [client 45.3.47.161:13981] [client ...
show more
[Tue Jun 23 09:05:50.428525 2026] [security2:error] [pid 175134] [client 45.3.47.161:13981] [client 45.3.47.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "ajm_ztjyxnRBxhVRFxBWSwAAAAc"]
...
show less
Web App Attack
🇩🇪
Bedios GmbH
2026-04-20 04:23:09
(4 months ago)
SQL backup theft attempt
Hacking
🇩🇪
FeG Deutschland
2026-04-19 21:18:25
(4 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
LRob
2026-04-07 05:00:11
(4 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-02-17 16:52:34
(6 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:56
(7 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-29 05:35:51
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.161 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:35:44.130784 2025] [security2:error] [pid 1378:tid 1378] [client 45.3.47.161:33571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mbehel.com"] [uri "/.env"] [unique_id "aVITMK6cqgLcE-MFQjw2wwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 21:11:09
(8 months ago)
(mod_security) mod_security (id:210740) triggered by 45.3.47.161 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210740) triggered by 45.3.47.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:10:38.356583 2025] [security2:error] [pid 20490:tid 20490] [client 45.3.47.161:26437] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||advancedmotorsports.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "advancedmotorsports.com"] [uri "/contact/gastenboek.php"] [unique_id "aS9VzgBkZ8GH81SCxCU3fgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-26 09:31:22
(9 months ago)
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ...
show more
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:38:54
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.161 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:38:46.934948 2025] [security2:error] [pid 22146:tid 22146] [client 45.3.47.161:60559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cuetzpalin.com"] [uri "/.git/HEAD"] [unique_id "aSagdg1BDN_x06y8B_0E8gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-24 15:59:42
(9 months ago)
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing.
show less
Web App Attack