🇲🇽
octageeks.com
2026-08-23 04:06:39
(1 week ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇫🇷
ELYAZ
2026-08-22 17:31:26
(1 week ago)
(wordpress) Failed wordpress login from 104.207.48.217 (BR/Brazil/-): (CF_ENABLE)
Brute-Force
🇮🇹
VHosting
2026-08-22 11:00:07
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-08-22 06:16:08
(1 week ago)
Web attack blocked by Wordfence on 1valkenburg.nl (1 hit). Reported by CRMON.
Web App Attack
🇬🇧
consul.to
2026-07-21 21:15:31
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
LRob
2026-06-14 19:15:51
(2 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2026-01-27 16:46:55
(7 months ago)
2026-01-27T18:46:54.793737+02:00 zanati wp(www.sahpa.co.za)[786122]: Blocked authentication attempt ...
show more
2026-01-27T18:46:54.793737+02:00 zanati wp(www.sahpa.co.za)[786122]: Blocked authentication attempt for [email protected] from 104.207.48.217
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 07:54:35
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 02:54:30.379384 2026] [security2:error] [pid 5617:tid 5617] [client 104.207.48.217:34201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kristasrecoverycoaching.com.kildarafarms.com"] [uri "/.env"] [unique_id "aWtANrY_IzSpHUIKkpeobgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-17 03:15:33
(7 months ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇷
Jean Valjean
2026-01-04 17:38:48
(7 months ago)
Fail2ban Caboom : xmlrpc.php Abuse
SQL Injection
Web App Attack
🇦🇺
afleventoffice.com.au
2025-12-31 02:36:24
(8 months ago)
GET /wp-login.php HTTP/1.1
Web App Attack
🇺🇸
TPI-Abuse
2025-12-31 01:51:44
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 20:51:40.339706 2025] [security2:error] [pid 988727:tid 988741] [client 104.207.48.217:31053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.selecttech.org"] [uri "/.svn/wc.db"] [unique_id "aVSBrF8-FV7n5yAh1JEteAAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-30 08:26:51
(8 months ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 11:49:49
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:49:41.527432 2025] [security2:error] [pid 23851:tid 23851] [client 104.207.48.217:22305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lexingtonlimobus.com"] [uri "/.git/HEAD"] [unique_id "aVJq1T6GJS2nA9Agz2ERJQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 10:55:28
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 05:55:24.635115 2025] [security2:error] [pid 6219:tid 6219] [client 104.207.48.217:55231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dutchgreenrecycling.com"] [uri "/.env"] [unique_id "aVJeHAFQvTGgXo8UT20bCgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack