|
🇦🇺
RedBear IT
|
|
"DDoS against public endpoint"
|
DDoS Attack
|
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from 4 different servers
|
Brute-Force
Web App Attack
|
|
|
🇦🇺
screwlooseit.com.au
|
|
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
|
Web App Attack
|
|
|
🇫🇮
Shaik Sai Meera
|
|
IM360 WAF: Hidden file access
|
Brute-Force
|
|
|
🇺🇸
myagent.site
|
|
Blocking for trying to access an exploit file: /.env
|
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 16:09:19.539821 2025] [security2:error] [pid 22901:tid 22921] [client 65.111.30.29:16643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miltonthepuppy.com"] [uri "/.git/HEAD"] [unique_id "aTXs_zYrdhn9AbqI9Kn86QAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:46:12.010235 2025] [security2:error] [pid 4316:tid 4316] [client 65.111.30.29:20051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolwebsites.org"] [uri "/.env"] [unique_id "aTV3FO7i3qXe7CF2Iprx3QAAAB4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:13:16.737409 2025] [security2:error] [pid 26442:tid 26442] [client 65.111.30.29:43055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andy-blakk.org"] [uri "/.svn/wc.db"] [unique_id "aTVvXJt7eoBlAuiihLygewAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:55:44.152020 2025] [security2:error] [pid 17630:tid 17630] [client 65.111.30.29:21195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secure-rep.com"] [uri "/.env"] [unique_id "aTK6MLVsi2RgT6ppCm5FygAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:57:28.586474 2025] [security2:error] [pid 30356:tid 30356] [client 65.111.30.29:11089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cookingwithjule.com"] [uri "/.env"] [unique_id "aTJYKCmueRI6hS3KI7ZgBAAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:35:12.613654 2025] [security2:error] [pid 25112:tid 25112] [client 65.111.30.29:23273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djbadger.com"] [uri "/.env"] [unique_id "aTJS8PeUIemvOIJtqjNSJwAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
DEV-DNS
|
|
(wordpress) Failed wordpress login from 65.111.30.29 (FR/France/Île-de-France/Paris/-/[redacted])
|
Brute-Force
|
|
|
Anonymous
|
|
This IP was involved in an brute force and password spray attack on 2025/11/02 07:28:37
|
Port Scan
Brute-Force
Exploited Host
Web App Attack
|
|
|
🇺🇸
inspectorgdgt
|
|
Failed login for non existing user sslvpn
|
DDoS Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.30.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 19 17:00:09.003090 2025] [security2:error] [pid 10001:tid 10001] [client 65.111.30.29:58653] [client 65.111.30.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||transportdelivery.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transportdelivery.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7ZUaYWBjykvBp2VP6JJEwAAABg"], referer: https://transportdelivery.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|