🇲🇽
octageeks.com
2026-11-12 05:12:09
UTC ·
(22 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-10 10:19:40
UTC ·
(2 days ago)
[10/Nov/2026:12:19:40 +0200] -- 14.230.161.98 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:56:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 14.230.161.98 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:55:58.462466 2026] [security2:error] [pid 2791:tid 2791] [client 14.230.161. ...
show more
(mod_security) mod_security (id:225170) triggered by 14.230.161.98 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:55:58.462466 2026] [security2:error] [pid 2791:tid 2791] [client 14.230.161.98:43580] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||qed-consulting.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "qed-consulting.co"] [uri "/wp-json/wp/v2/users"] [unique_id "avKx7nPpe_akcIh6AdjO4wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 08:30:03
UTC ·
(6 days ago)
| [Dangerous/Vietnam] Aggressive IP 14.230.161.98 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-11-06 07:21:16
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 14.230.161.98 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:21:07.524585 2026] [security2:error] [pid 16025:tid 16025] [client 14.230.16 ...
show more
(mod_security) mod_security (id:225170) triggered by 14.230.161.98 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:21:07.524585 2026] [security2:error] [pid 16025:tid 16025] [client 14.230.161.98:53108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||matt-bechtel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "matt-bechtel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au1_4yklwML2V7v32b7eygAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-06 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-11-01 08:17:27
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 14.230.161.98
2026-11-01T09:06:54+0100 vpn Access-Reject station: 14.230.161.98
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 12:45:43
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 14.230.161.98 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:45:31.641845 2026] [security2:error] [pid 8103:tid 8103] [client 14.230.161. ...
show more
(mod_security) mod_security (id:225170) triggered by 14.230.161.98 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:45:31.641845 2026] [security2:error] [pid 8103:tid 8103] [client 14.230.161.98:56354] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||puckerbackbikini.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puckerbackbikini.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auXi6_wqcaAE-8d-n12XCgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-31 08:40:59
UTC ·
(1 week ago)
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wc/v2/customers | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 | 2026-10-31 08:40 UTC
Bad Web Bot
🇨🇿
Countryman
2026-10-31 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇩🇪
LRob
2026-10-30 08:31:56
UTC ·
(1 week ago)
Not following 301 redirects — wasted requests | host: assainissement-etang.fr | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36 | src_port: 33408
Bad Web Bot
🇩🇪
4server
2026-10-29 06:38:14
UTC ·
(2 weeks ago)
[ThuOct2907:38:11.0912362026][security2:error][pid2208308:tid2208436][client14.230.161.98:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\" ...
show more
[ThuOct2907:38:11.0912362026][security2:error][pid2208308:tid2208436][client14.230.161.98:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"massimilianoparquet.ch\"][uri\"/xmlrpc.php\"][unique_id\"auLp0yqh_6O84tAZ4n-6BQAAAMw\"]
show less
Port Scan
Brute-Force
Web App Attack
2025-10-07 15:24:12
UTC ·
(1 year ago)
Malicious activity detected
Hacking
Brute-Force
