🇪🇸
10dencehispahard SL
2025-09-19 05:09:19
(9 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
hostseries
2025-05-11 17:20:53
(1 year ago)
Brute-force cPanel Services
Brute-Force
🇺🇸
hostseries
2025-05-08 22:51:39
(1 year ago)
Brute-force cPanel Services
Brute-Force
🇺🇸
hostseries
2025-05-06 16:44:23
(1 year ago)
Brute-force cPanel Services
Brute-Force
🇺🇸
hostseries
2025-04-16 20:43:57
(1 year ago)
Trigger: LF_DISTATTACK
Brute-Force
2025-02-11 17:40:33
(1 year ago)
Ports: 110,995; Direction: 0; Trigger: LF_POP3D
Brute-Force
SSH
🇺🇸
Chris Saldana
2024-10-07 00:00:00
(1 year ago)
Comment39
Web Spam
🇩🇪
updown.io
2024-10-03 17:59:57
(1 year ago)
{"level":"info","ts":1727977495.741065,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1727977495.741065,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"79.142.76.112","remote_port":"12259","client_ip":"79.142.76.112","proto":"HTTP/1.1","method":"GET","host":"status.cadizm.com","uri":"/","headers":{"Upgrade-Insecure-Requests":["1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8"],"Accept-Encoding":["gzip, deflate, sdch, br"],"Accept-Language":["en-US,en;q=0.8,fr;q=0.6"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0"],"Connection":["keep-alive"],"Cache-Control":["no-store"]}},"bytes_read":0,"user_id":"","duration":0.000045267,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.cadizm.com/"],"Content-Type":[]}}
{"level":"info","ts":1727977496.4116478,"logger":"http.log.access.log1","msg":"handled request","request":{"remote
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 17:50:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 79.142.76.112 (r-112-76-142-79.consumer-pool.pr ...
show more
(mod_security) mod_security (id:210730) triggered by 79.142.76.112 (r-112-76-142-79.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 13:50:01.473790 2024] [security2:error] [pid 16285:tid 16285] [client 79.142.76.112:12327] [client 79.142.76.112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||museum.henning.org|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "museum.henning.org"] [uri "/config/php.ini"] [unique_id "Zv7ZScYzDZc2nSzYWujpoQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 14:38:24
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 79.142.76.112 (r-112-76-142-79.consumer-pool.pr ...
show more
(mod_security) mod_security (id:210730) triggered by 79.142.76.112 (r-112-76-142-79.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 10:38:18.434125 2024] [security2:error] [pid 19977:tid 19977] [client 79.142.76.112:12200] [client 79.142.76.112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||premiumenterprisessolution.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "premiumenterprisessolution.com"] [uri "/config/php.ini"] [unique_id "Zv6sWqZcddEgSYU5Rho1LwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
oonux.net
2024-08-15 19:20:18
(1 year ago)
RouterOS: The host 79.142.76.112 trying to use anonymous proxy
Hacking
Bad Web Bot
Exploited Host
2024-05-14 01:22:07
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
ISPLtd
2024-04-10 08:16:27
(2 years ago)
Apr 10 05:16:24 SRC=79.142.76.112 PROTO=TCP SPT=15994 DPT=22556 SYN
Apr 10 05:16:25 SRC=79.142.76.11 ...
show more
Apr 10 05:16:24 SRC=79.142.76.112 PROTO=TCP SPT=15994 DPT=22556 SYN
Apr 10 05:16:25 SRC=79.142.76.112 PROTO=TCP SPT=15994 DPT=22556 SYN
Apr 10 05:16:27 SRC=79.142.76.112 PROTO=TCP SPT=15994 DPT=22556 WIND
...
show less
Port Scan
🇿🇦
Birdflew
2023-05-18 00:39:12
(3 years ago)
Wordpress attack
Web App Attack
🇳🇱
ipoac.nl
2023-05-12 15:29:19
(3 years ago)
[2023-05-12 17:29:19] NOTICE[2369747] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:6 ...
show more
[2023-05-12 17:29:19] NOTICE[2369747] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '79.142.76.112:9864' (callid: e5f4a114282702e4f7a620) - No matching endpoint found
show less
Fraud VoIP
Brute-Force