|
🇫🇷
ELYAZ
|
|
(wordpress) Failed wordpress login from 65.111.22.52 (GB/United Kingdom/-): (CF_ENABLE)
|
Brute-Force
|
|
|
🇦🇺
HJ5Ss4Ju
|
|
Blocked by Wordfence (SID 6)
|
Web App Attack
|
|
|
🇺🇸
lostswordfish.com
|
|
Wordfence waf block on 1105merrystreet
|
Web App Attack
|
|
|
🇩🇪
stinpriza
|
|
Web App Attack
|
Web App Attack
|
|
|
🇩🇪
stinpriza
|
|
Web App Attack
|
Web App Attack
|
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from 4 different servers
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
stinpriza
|
|
Web App Attack
|
Web App Attack
|
|
|
🇦🇺
RedBear IT
|
|
"DDoS against public endpoint"
|
DDoS Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:38:16.128604 2025] [security2:error] [pid 26546:tid 26546] [client 65.111.22.52:57847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sandecs.com"] [uri "/.env"] [unique_id "aSQniFXRzcEW485Qy1C85wAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:46:29.395324 2025] [security2:error] [pid 6659:tid 6659] [client 65.111.22.52:12437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.reyesleyva.gabosoftware.com"] [uri "/.env"] [unique_id "aSQNVUPOU47R0swIJsWQXgAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:03:43.377036 2025] [security2:error] [pid 13941:tid 13988] [client 65.111.22.52:43695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bavaria-germany.aafm.us"] [uri "/.git/HEAD"] [unique_id "aSQDT_SSVFm8noxFLWxRHwAAAUo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:59:38.959284 2025] [security2:error] [pid 19751:tid 19751] [client 65.111.22.52:27113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.healthpointphysicians.co"] [uri "/.env"] [unique_id "aSP0SnEDchbDVCLJmsbVtwAAACg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Unauthorized VPN login attempts
|
Hacking
Brute-Force
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.22.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 18:21:18.783870 2024] [security2:error] [pid 14737:tid 14737] [client 65.111.22.52:4613] [client 65.111.22.52] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||purebinary.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "purebinary.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZwRe3lQjKvEWUygxYoAsHwAAABQ"], referer: https://purebinary.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
anon333
|
|
Hacker syslog review 1727487429
|
Hacking
|
|