🇵🇹
Information Security
2026-10-27 18:15:42
(11 hours ago)
Web App Attack
...
Web App Attack
🇩🇪
Hazzard
2026-10-27 09:40:10
(19 hours ago)
(wordpress) Failed wordpress login from 124.13.194.113 (MY/Malaysia/Kuala Lumpur/Kuala Lumpur/-/[red ...
show more
(wordpress) Failed wordpress login from 124.13.194.113 (MY/Malaysia/Kuala Lumpur/Kuala Lumpur/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-10-27 08:01:44
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 04:01:38.526656 2026] [security2:error] [pid 23632:tid 23632] [client 124.13.194.113:27260] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jessicalevant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jessicalevant.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auBaYmJAZdNvFWtN9bxIzgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-27 04:44:09
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 18:12:05
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:11:57.843415 2026] [security2:error] [pid 9490:tid 9490] [client 124.13.194.113:50594] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||diamondtrailerserv.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "diamondtrailerserv.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "at-X7d8-fFMso_WwHOZXbQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 16:45:07
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:44:58.552016 2026] [security2:error] [pid 23781:tid 23781] [client 124.13.194.113:27175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||judithcaldwell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "judithcaldwell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at-DijxGKiGkgsNcFoOCUAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
aranguren.org
2026-10-25 07:05:34
(2 days ago)
124.13.194.113 - - [25/Oct/2026:18:05:32 +1100] "POST /wp-login.php HTTP/2.0" 404 45049 "https://lif ...
show more
124.13.194.113 - - [25/Oct/2026:18:05:32 +1100] "POST /wp-login.php HTTP/2.0" 404 45049 "https://life.luisaranguren.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_128_GCM_SHA256
124.13.194.113 - - [25/Oct/2026:18:05:33 +1100] "GET /wp-login.php HTTP/2.0" 404 45049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_128_GCM_SHA256
...
show less
Web App Attack
🇺🇸
dtorrer
2026-10-24 18:09:36
(3 days ago)
Brute-force general attack.
Brute-Force
🇺🇸
mnsf
2026-10-22 14:06:23
(5 days ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
2026-10-22 11:19:48
(5 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
FeG Deutschland
2026-10-18 23:56:25
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 02:49:36
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 22:49:30.597854 2026] [security2:error] [pid 31228:tid 31228] [client 124.13.194.113:61912] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frelsburg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frelsburg.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atLiOqk32PJxBBriWTCjXwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 00:17:03
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:16:58.023336 2026] [security2:error] [pid 1693:tid 1693] [client 124.13.194.113:18813] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||konahawaii.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "konahawaii.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atK-er7TRFTaa7oegq9rXQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 16:15:07
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.13.194.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:15:00.312275 2026] [security2:error] [pid 9574:tid 9574] [client 124.13.194.113:18692] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||activethinkers.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "activethinkers.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJNhOLOrri2a31hB9o_4wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-14 13:48:15
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
