🇺🇸
integrantservices.com
2026-08-07 01:40:35
(2 weeks ago)
(wordpress) Failed wordpress login from 64.112.57.178 (US/United States/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-08-03 22:44:23
(2 weeks ago)
(mod_security) mod_security (id:212620) triggered by 64.112.57.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 64.112.57.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 18:44:01.853508 2026] [security2:error] [pid 1193166:tid 1193166] [client 64.112.57.178:58285] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.bassboatmagazine.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /advertisebbm/gotourl.php?id=5<scr<script>ipt>alert(qsxss9k7z)</scr</script>ipt>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.bassboatmagazine.com"] [uri "/advertiseBBM/gotourl.php"] [unique_id "anEZsd3pOICmxduAUC-F1wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-03 16:06:54
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 64.112.57.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.57.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 12:06:32.766571 2026] [security2:error] [pid 3963970:tid 3964000] [client 64.112.57.178:60477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uoexpanse.com"] [uri "/.env.stage"] [unique_id "anC8iF2BNgQkDTQb1jqdHAAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-08-03 09:38:00
(2 weeks ago)
IPBlock protected site ID [4055-d][s=01].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Matthew Ping
2026-08-01 14:45:11
(2 weeks ago)
ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇧🇪
cmbplf
2026-08-01 05:15:37
(2 weeks ago)
2.069 requests from abuseipdb.com blacklisted IP (11mos4w2m)
Brute-Force
Bad Web Bot
🇷🇺
Mga Admin
2026-07-30 14:38:17
(3 weeks ago)
64.112.57.178 - - [30/Jul/2026:21:38:17 +0700] "GET /lam/templates/lib/login.php?useProfile=' HTTP/1 ...
show more
64.112.57.178 - - [30/Jul/2026:21:38:17 +0700] "GET /lam/templates/lib/login.php?useProfile=' HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇦🇺
Bay13
2026-07-22 23:40:46
(4 weeks ago)
CrowdSec:custom/http-probing
Web App Attack
🇩🇪
raph
2026-07-22 14:50:30
(4 weeks ago)
[001] honeypot form submission
Web Spam
Blog Spam
🇺🇸
ipblock.com
2026-07-17 13:07:00
(1 month ago)
IPBlock protected site ID [4055-d][s=01].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-07-17 10:03:00
(1 month ago)
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-07-16 17:20:00
(1 month ago)
IPBlock protected site ID [4730-fr].
Exploit request, vulnerability probe.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TheJimmo
2026-07-16 13:47:35
(1 month ago)
64.112.57.178 64.112.57.178 - - [16/Jul/2026:13:45:34 +0000] "GET /vendor/phpunit/phpunit/Util/PHP/e ...
show more
64.112.57.178 64.112.57.178 - - [16/Jul/2026:13:45:34 +0000] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 13422 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
64.112.57.178 64.112.57.178 - - [16/Jul/2026:13:45:38 +0000] "POST /admin/%3Fn=language&c=language_general&a=doExportPack HTTP/1.1" 404 13441 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
64.112.57.178 64.112.57.178 - - [16/Jul/2026:13:45:45 +0000] "GET /owa/ HTTP/1.1" 404 13340 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
64.112.57.178 64.112.57.178 - - [16/Jul/2026:13:45:47 +0000] "GET /GallerySite/filesrc/fotoilan/388/middle//.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 404 13471 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36
...
show less
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-15 21:59:38
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-14.
show less
Web App Attack
SSH
Hacking
🇩🇪
FeG Deutschland
2026-07-15 21:21:45
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack