🇫🇷
bigorre.org
2026-07-26 09:56:22
(1 day ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
2026-05-22 13:41:44
(2 months ago)
LH-Watcher: FAKE_ID [Fake Googlebot]
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-20 08:27:13
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 104.224.90.142 (104.224.90.142.colocationameric ...
show more
(mod_security) mod_security (id:225170) triggered by 104.224.90.142 (104.224.90.142.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 03:27:07.648294 2025] [security2:error] [pid 23307:tid 23307] [client 104.224.90.142:35125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.fatparrots.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.fatparrots.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aR7Q2-vgXZs_BEqVoiNbwQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-31 05:59:07
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 104.224.90.142 (104.224.90.142.colocationameric ...
show more
(mod_security) mod_security (id:225170) triggered by 104.224.90.142 (104.224.90.142.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 01:58:59.049328 2025] [security2:error] [pid 26673:tid 26673] [client 104.224.90.142:34007] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dietzengineers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dietzengineers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQRQIwflcKA64WCmufQYVQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
gu-alvareza
2025-09-11 07:05:03
(10 months ago)
WordPress.REST.API.Username.Enumeration.Information.Disclosure
Web App Attack
2025-08-30 06:53:03
(10 months ago)
Malicious activity detected
Hacking
Web App Attack
🇳🇱
exxos
2025-08-29 08:03:01
(10 months ago)
Attacks with Bad user agents
Hacking
2025-08-29 06:34:44
(10 months ago)
Malicious activity detected
Hacking
Brute-Force
🇺🇸
MortimerCat
2024-10-26 23:02:32
(1 year ago)
Attempting to access Wordpress login on a honeypot or private system.
Web App Attack
🇺🇸
nowyouknow
2024-08-09 04:54:17
(1 year ago)
Malicious Traffic/Form Submission
Phishing
Web Spam
🇺🇸
TPI-Abuse
2024-08-07 05:10:11
(1 year ago)
(mod_security) mod_security (id:217280) triggered by 104.224.90.142 (104.224.90.142.colocationameric ...
show more
(mod_security) mod_security (id:217280) triggered by 104.224.90.142 (104.224.90.142.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 01:10:04.529769 2024] [security2:error] [pid 15229:tid 15229] [client 104.224.90.142:44531] [client 104.224.90.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||agchurchkuwait.com|F|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "agchurchkuwait.com"] [uri "/action_page.php"] [unique_id "ZrMBrCaY8f-MkI4Us1_G0wAAAAU"], referer: http://agchurchkuwait.com/contact%20us.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
oncord
2024-08-04 05:03:08
(1 year ago)
Form spam
Web Spam
🇺🇸
oncord
2024-07-24 05:36:54
(2 years ago)
Form spam
Web Spam
🇺🇸
semmelbroesel
2024-05-03 11:04:20
(2 years ago)
Web form spam - triggered honeypot - submitted data: (First Name - Honeypot field): Vjiupsrob *** (N ...
show more
Web form spam - triggered honeypot - submitted data: (First Name - Honeypot field): Vjiupsrob *** (Name): Vjiupsrob *** (Email): [email protected] *** (Message): I was really itching to treat some wager some well-to-do on some sports matches that are phenomenon right now. I wanted to allow in you guys be familiar with that I did find what I reckon with to be the kindest site in the USA.
If you fall short of to confound in on the action, authenticate it out: <a href=https://igamblingstar.com/crypto-casinos/>https://igamblingstar.com/crypto-casinos/</a>
show less
Web Spam
2024-04-13 11:40:57
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH