🇩🇪
big-cloud.nl
2026-10-25 05:59:22
(3 days ago)
Try to access /xmlrpc.php
Web App Attack
🇲🇽
octageeks.com
2026-10-25 04:16:56
(3 days ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 15:14:32
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 14.192.213.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 14.192.213.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:14:25.409908 2026] [security2:error] [pid 5790:tid 5790] [client 14.192.213.112:4530] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||innovacionesnimba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "innovacionesnimba.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "atzLUZlzefHgfa4vZg7e9gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-22 01:16:56
(6 days ago)
Vulnerability scanning | host: pestacolo.com | method: GET | path: /wp-json/wp/v2/users | src_port: ...
show more
Vulnerability scanning | host: pestacolo.com | method: GET | path: /wp-json/wp/v2/users | src_port: 1319
show less
Port Scan
Web App Attack
🇩🇪
FeG Deutschland
2026-10-21 20:31:19
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-10-21 15:05:41
(6 days ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 10:12:51
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 14.192.213.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 14.192.213.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:12:43.952504 2026] [security2:error] [pid 12165:tid 12165] [client 14.192.213.112:1470] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lambert-heating-and-air.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lambert-heating-and-air.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atiQG5aHAOIOU0PkWKwvFQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 09:29:13
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 14.192.213.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 14.192.213.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 05:29:07.069276 2026] [security2:error] [pid 18034:tid 18034] [client 14.192.213.112:3361] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jessicalevant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jessicalevant.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atiF4zUErpc2s9wAeC-AdwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 08:19:13
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 14.192.213.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 14.192.213.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 04:19:09.149532 2026] [security2:error] [pid 26202:tid 26202] [client 14.192.213.112:3840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cnphilos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cnphilos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ath1fXxb_72gPBRIcVsMlwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-10-21 02:55:58
(1 week ago)
WordPress login attempt
Brute-Force
🇩🇪
big-cloud.nl
2026-10-21 02:32:51
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
2026-10-08 09:58:00
(2 weeks ago)
Network service scanning detected by FortiGate; source quarantined.
Port Scan
2026-10-03 05:08:51
(3 weeks ago)
MikroTik Enterprise Honeypot
Port Scan
2026-09-26 10:09:34
(1 month ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
🇨🇦
dpinse
2026-09-26 07:26:51
(1 month ago)
Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 23/TELNET
Hacking
Port Scan
