🇺🇸
TPI-Abuse
2026-10-26 13:24:17
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 103.49.203.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.49.203.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 09:24:09.226296 2026] [security2:error] [pid 26391:tid 26391] [client 103.49.203.124:40988] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kompareiq.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kompareiq.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at9UecIr6UuSQiiIr17xgwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-26 08:57:37
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
psauxit
2026-10-24 10:32:27
(4 days ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Web App Attack
Hacking
2026-10-19 19:19:36
(1 week ago)
apache vulnerability scan
Web App Attack
🇺🇸
lostswordfish.com
2026-10-19 13:10:08
(1 week ago)
Wordfence waf block on floridaactioncommittee
Web App Attack
2026-10-19 05:15:44
(1 week ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /communications/telephony/phones/shopby/iptel_application-sekretar-personal_noe/iptel_type-konferencsvjaz/manufacturer-aastra.html | UA: Opera/8.10.(Windows NT 6.2; cs-CZ) Presto/2.9.175 Version/12.00 | (Magento Site)
show less
Hacking
Bad Web Bot
🇲🇹
Malta
2026-10-15 07:29:29
(1 week ago)
103.49.203.124 - - [15/Oct/2026:09:29:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
103.49.203.124 - - [15/Oct/2026:09:29:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-10-14 16:34:46
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.49.203.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.49.203.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:34:40.138413 2026] [security2:error] [pid 24401:tid 24436] [client 103.49.203.124:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mindgardens.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mindgardens.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as-vIJ6yLoFZxDBskwWSQwAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 13:45:29
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.49.203.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.49.203.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:45:22.571269 2026] [security2:error] [pid 12636:tid 12636] [client 103.49.203.124:34456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||takeapawsboston.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "takeapawsboston.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as-HchdEA41pr-BxyADbcgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-14 13:05:23
(2 weeks ago)
Abuse Detected (2)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-13 05:45:50
(2 weeks ago)
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wp/v2/users/me | ua: Mo ...
show more
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wp/v2/users/me | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
kosada.com
2026-08-20 20:27:46
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-08-03 12:28:48
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇷🇴
INTEQ
2026-08-03 10:05:26
(2 months ago)
Web attack from 103.49.203.124
Web App Attack
🇺🇸
kosada.com
2026-07-24 06:55:22
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
