🇫🇷
dynamix
2026-10-18 11:30:55
(1 day ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 12:19:08
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 102.208.164.236 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.208.164.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 08:19:02.838798 2026] [security2:error] [pid 14344:tid 14344] [client 102.208.164.236:45674] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||intothebigempty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "intothebigempty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNntnWn0ZD2nbXZdoDqdAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-10-17 09:20:02
(2 days ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇹🇷
oalver
2026-10-17 08:08:49
(2 days ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-10-17. Risk score: 30/100.
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-10-16 17:42:27
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
pixelmemory.us
2026-10-16 04:16:42
(4 days ago)
2026-10-16T04:14:43 102.208.164.236 GET /Photos/Work/Shutterfly/t/4263.jpg Mozilla/5.0 (Windows NT 1 ...
show more
2026-10-16T04:14:43 102.208.164.236 GET /Photos/Work/Shutterfly/t/4263.jpg Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
...
show less
Bad Web Bot
🇦🇺
MAGIC
2026-10-15 05:02:25
(5 days ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
mnsf
2026-10-14 21:06:27
(5 days ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-14 14:34:21
(5 days ago)
Shop search flood (L7 DDoS) | path: /97-vtc-all-road-electrique | query: order=product.position.asc& ...
show more
Shop search flood (L7 DDoS) | path: /97-vtc-all-road-electrique | query: order=product.position.asc&productListView=grid&productListView=grid&q=Selections-Promo | src_port: 56138 | 2026-10-14 14:34 UTC
show less
DDoS Attack
Web App Attack
🇨🇭
ALPHANET
2026-10-13 23:50:03
(6 days ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇺🇸
TPI-Abuse
2026-10-13 15:41:25
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 102.208.164.236 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.208.164.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:41:17.597790 2026] [security2:error] [pid 23437:tid 23437] [client 102.208.164.236:48222] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rentbright.hangrypandas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rentbright.hangrypandas.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as5RHfxS8gCwjIJIPLlznAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 11:47:21
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 102.208.164.236 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.208.164.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 07:47:16.000904 2026] [security2:error] [pid 14866:tid 14866] [client 102.208.164.236:59006] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wwfstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wwfstudio.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as4aQwhorBgiA79iy55vxQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-13 07:32:36
(6 days ago)
Not following 301 redirects — wasted requests | method: GET | path: /2013/03 | ua: Mozilla/5.0 (Wind ...
show more
Not following 301 redirects — wasted requests | method: GET | path: /2013/03 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
show less
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2026-10-12 15:26:52
(1 week ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇪🇸
librebit
2026-10-11 14:35:36
(1 week ago)
Brute force
Brute-Force
