🇺🇸
TPI-Abuse
2026-11-09 02:15:41
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210410) triggered by 47.243.96.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:15:33.055036 2026] [security2:error] [pid 4749:tid 4749] [client 47.243.96.77:33520] ModSe ...
show more
(mod_security) mod_security (id:210410) triggered by 47.243.96.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:15:33.055036 2026] [security2:error] [pid 4749:tid 4749] [client 47.243.96.77:33520] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in REQUEST_HEADERS:Cookie outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||insidemilb.com|F|3"] [data "REQUEST_HEADERS:Cookie=hvHi=\\x8f\\x8e\\x98\\xc2\\xaa\\x07\\xb7\\x9b.\\xe7\\x00\\xd0\\xb2\\xa5 \\x8b"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "insidemilb.com"] [uri "/wp-author.php"] [unique_id "avEsxW6HAfXLFC_7t9zAZAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-08 23:45:06
UTC ·
(23 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 15
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-11-08 23:05:01
UTC ·
(1 day ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 10:22:24
UTC ·
(1 day ago)
(mod_security) mod_security (id:210410) triggered by 47.243.96.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:22:19.051680 2026] [security2:error] [pid 29934:tid 29934] [client 47.243.96.77:35574] Mod ...
show more
(mod_security) mod_security (id:210410) triggered by 47.243.96.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:22:19.051680 2026] [security2:error] [pid 29934:tid 29934] [client 47.243.96.77:35574] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in REQUEST_HEADERS:Cookie outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||michaelthompson.biz|F|3"] [data "REQUEST_HEADERS:Cookie=hvHi=\\x8f\\x8e\\x98\\xc2\\xaa\\x01\\xb1\\x9f,\\xe7\\x00\\xd9\\xb9\\xa0 \\x8b"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "michaelthompson.biz"] [uri "/wp-author.php"] [unique_id "avBNW7WDS9fiJuEQC6DOZAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-11-08 05:10:08
UTC ·
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇩🇪
4server
2026-11-07 16:39:16
UTC ·
(2 days ago)
[SatNov0717:39:12.2190412026][security2:error][pid2987523:tid2987654][client47.243.96.77:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an ...
show more
[SatNov0717:39:12.2190412026][security2:error][pid2987523:tid2987654][client47.243.96.77:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atREQUEST_COOKIES:4d5d155d508a4a358e8ec19b16a4af51.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(4741\*4550\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"www.massimilianoparquet.ch\"][uri\"/wp-content/themes/twentytwentyfour/functions.php\"][unique_id\"au9UMNnKrRM_eDuhMqAXNwAAARQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
ELYAZ
2026-09-05 02:07:20
UTC ·
(2 months ago)
(wordpress) Failed wordpress login from 47.243.96.77 (HK/Hong Kong/-): (CF_ENABLE)
Brute-Force
🇩🇪
maxpower
2026-09-04 18:41:49
UTC ·
(2 months ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 47.243.96.77 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 47.243.96.77 - - [04/Sep/2026:20:41:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 1 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 47.243.96.77 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 47.243.96.77 - - [04/Sep/2026:20:41:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 11959 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0" "-" host=slccgilabruzzomolise.it
show less
Port Scan
🇳🇱
Site.eu
2026-08-15 09:31:14
UTC ·
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇹🇷
eryilmaz
2026-08-15 02:00:34
UTC ·
(2 months ago)
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /wp-login.php
Web App Attack
Hacking
🇲🇹
Malta
2026-08-14 21:16:04
UTC ·
(2 months ago)
47.243.96.77 - - [14/Aug/2026:23:16:04 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 Edg/141.0.0.0"
Hacking
Web App Attack
🇮🇹
CoreTech srl
2026-08-14 14:38:56
UTC ·
(2 months ago)
cloudlinux2 fail2ban: 2026-08-14 16:34:26,162 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 103.220.30.158 - 2026-08-14 16:34:26cloudlinux2 fail2ban: 2026-08-14 16:34:22,563 fail2ban.filter [1695]: INFO [plesk-modsecuri ...
show more
cloudlinux2 fail2ban: 2026-08-14 16:34:26,162 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 103.220.30.158 - 2026-08-14 16:34:26cloudlinux2 fail2ban: 2026-08-14 16:34:22,563 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 159.89.121.247 - 2026-08-14 16:34:22cloudlinux2 fail2ban: 2026-08-14 16:34:22,572 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 159.89.121.247 - 2026-08-14 16:34:22cloudlinux2 fail2ban: 2026-08-14 16:34:36,764 fail2ban.actions [1695]: NOTICE [plesk-modsecurity] Ban 103.220.30.158cloudlinux2 fail2ban: 2026-08-14 16:34:36,743 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 103.220.30.158 - 2026-08-14 16:34:36cloudlinux2 fail2ban: 2026-08-14 16:34:36,769 fail2ban.filter [1695]: INFO [recidive] Found 103.220.30.158 - 2026-08-14 16:34:36cloudlinux2 fail2ban: 2026-08-14 16:36:41,125 fail2ban.actions [1695]: NOTICE [plesk-modsecurity] Unban 201.153.131.17cloudlinux2 fail2ban: 2026-08-14 16:38:06,1
show less
Web App Attack
🇩🇪
LRob
2026-08-14 08:07:39
UTC ·
(2 months ago)
WordPress probing | req: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
Brute-Force
Web App Attack
🇺🇸
dtorrer
2026-08-14 06:39:24
UTC ·
(2 months ago)
Brute-force general attack.
Brute-Force
🇩🇪
ghostwarriors
2026-08-14 03:20:21
UTC ·
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
