πΊπΈ
TPI-Abuse
2026-10-22 06:23:40
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 131.0.4.220 (131-0-4-220.dynamic.nvtel.com.br): ...
show more
(mod_security) mod_security (id:225170) triggered by 131.0.4.220 (131-0-4-220.dynamic.nvtel.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 02:23:32.384838 2026] [security2:error] [pid 7433:tid 7433] [client 131.0.4.220:40256] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dev.cosplayculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dev.cosplayculture.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atmr5PLFiIBoDMQv1jSv4AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
LRob
2026-10-20 12:53:01
(2 days ago)
Not following 301 redirects β wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects β wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
show less
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-10-17 09:58:51
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 131.0.4.220 (131-0-4-220.dynamic.nvtel.com.br): ...
show more
(mod_security) mod_security (id:225170) triggered by 131.0.4.220 (131-0-4-220.dynamic.nvtel.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:58:45.250887 2026] [security2:error] [pid 24211:tid 24229] [client 131.0.4.220:39401] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.store.emehache.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.store.emehache.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNG1fpoI8xB5rpDjkcf4AAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
FeG Deutschland
2026-10-16 23:44:35
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 07:34:31
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 131.0.4.220 (131-0-4-220.dynamic.nvtel.com.br): ...
show more
(mod_security) mod_security (id:225170) triggered by 131.0.4.220 (131-0-4-220.dynamic.nvtel.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:34:24.010610 2026] [security2:error] [pid 936:tid 936] [client 131.0.4.220:39569] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hertzan.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hertzan.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atHTgM02xP-nvh-cYs7bhgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π²π½
octageeks.com
2026-10-16 04:10:28
(6 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-10-09 04:42:52
(1 week ago)
π₯ Web application attack detected. Vulnerability scanning and exploitation attempts identified.
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-09 04:19:52
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 131.0.4.220 (131-0-4-220.dynamic.nvtel.com.br): ...
show more
(mod_security) mod_security (id:225170) triggered by 131.0.4.220 (131-0-4-220.dynamic.nvtel.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 00:19:45.586158 2026] [security2:error] [pid 25058:tid 25058] [client 131.0.4.220:39868] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||firstunitedreserve.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firstunitedreserve.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ashrYcDock_8DVqBv3pTtAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¨πΏ
Countryman
2026-10-02 00:10:01
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
πΊπΈ
ι¬Όε½±233
2026-09-06 21:29:11
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
πΊπΈ
ι¬Όε½±233
2026-09-03 00:01:45
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Bad Web Bot
πΊπΈ
kosada.com
2026-07-26 02:02:29
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
π©πͺ
EGP Abuse Dept
2026-07-20 00:42:09
(3 months ago)
Scanning for port/service exploits on tpc-027.mach3builders.nl
Port Scan
Hacking
2025-11-22 02:11:43
(11 months ago)
scanning http requests from known botnet
Web App Attack
πΊπΈ
rsiddall
2025-09-12 00:00:00
(1 year ago)
IP used faked sender domain, rejected due to DMARC policy, probable botnet member or drive-by VM
Email Spam