๐ฒ๐ฝ
octageeks.com
2026-10-09 04:27:59
(4 days ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
๐ต๐ฑ
sefinek.net
2026-10-08 15:08:36
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: //test/wp-includes/wlwmanifest.xml | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
FeG Deutschland
2026-10-08 15:08:24
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
๐จ๐ญ
Ribeye375
2026-10-08 15:00:18
(5 days ago)
HIPS rce-attempt - Block tcp/0:65535
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 14:49:47
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 136.70.145.207 (207.145.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 136.70.145.207 (207.145.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 10:49:39.790836 2026] [security2:error] [pid 17715:tid 17715] [client 136.70.145.207:64780] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nationalenq.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nationalenq.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asetgyfg-6BcRzHKMYSOCAAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
strefapi_com
2026-10-08 14:39:51
(5 days ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
Anonymous
2026-10-08 14:39:33
(5 days ago)
[Thu Oct 08 16:39:32.690722 2026] [authz_core:error] [pid 305491] [client 136.70.145.207:53619] AH01 ...
show more
[Thu Oct 08 16:39:32.690722 2026] [authz_core:error] [pid 305491] [client 136.70.145.207:53619] AH01630: client denied by server configuration: /var/www/html/default/wp-includes
[Thu Oct 08 16:39:32.806351 2026] [authz_core:error] [pid 305491] [client 136.70.145.207:53619] AH01630: client denied by server configuration: /var/www/html/default/feed
[Thu Oct 08 16:39:32.921036 2026] [authz_core:error] [pid 305491] [client 136.70.145.207:53619] AH01630: client denied by server configuration: /var/www/html/default/xmlrpc.php
[Thu Oct 08 16:39:33.006150 2026] [authz_core:error] [pid 305491] [client 136.70.145.207:53619] AH01630: client denied by server configuration: /var/www/html/default/blog
[Thu Oct 08 16:39:33.089617 2026] [authz_core:error] [pid 305491] [client 136.70.145.207:53619] AH01630: client denied by server configuration: /var/www/html/default/web
...
show less
Web App Attack
๐ต๐ฑ
Kashir
2026-10-08 14:36:44
(5 days ago)
Bad bot probing scripts for app vulnerabilities
Web App Attack
๐จ๐ญ
backslash
2026-10-08 14:36:00
(5 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-10-08 14:33:25
(5 days ago)
10 attempts against mh-misc-ban on eris
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-08 14:32:57
(5 days ago)
excessive HTTP 404 errors
Bad Web Bot
Anonymous
2026-10-08 14:32:12
(5 days ago)
136.70.145.207 - - [08/Oct/2026:16:32:12 +0200] "POST / HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows ...
show more
136.70.145.207 - - [08/Oct/2026:16:32:12 +0200] "POST / HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Web App Attack
๐ฉ๐ช
tsZero
2026-10-08 14:27:34
(5 days ago)
Scan example: path=/xmlrpc.php?rsd status=403
Hacking
๐ฎ๐น
VHosting
2026-10-08 14:25:03
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 14:22:27
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 136.70.145.207 (207.145.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 136.70.145.207 (207.145.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 10:22:23.168745 2026] [security2:error] [pid 17732:tid 17732] [client 136.70.145.207:53554] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||n4fh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "n4fh.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asenHzD0xx6c4v_T2lVV3QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack