🇨🇭
backslash
2026-10-28 01:21:06
(5 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇳🇱
maxxsense
2026-10-25 12:56:34
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 155.212.36.208 (PL/Poland/-)
SQL Injection
🇲🇽
octageeks.com
2026-10-04 04:14:33
(3 weeks ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇫🇷
dynamix
2026-09-30 21:32:31
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
omc
2026-09-29 14:40:49
(4 weeks ago)
POST unauthorized endpoint [Q4].
Bad Web Bot
🇲🇽
octageeks.com
2026-09-29 04:23:27
(4 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-14 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-09 01:49:42
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 155.212.36.208
2026-09-09T03:00:27+02 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 155.212.36.208
2026-09-09T03:00:27+02:00 vpn Access-Reject 'ts008' station: 155.212.36.208 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 00:15:29
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 16:08:55
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.36.208 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.36.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 12:08:47.715652 2026] [security2:error] [pid 8840:tid 8840] [client 155.212.36.208:30119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eagrant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eagrant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agSiDxjiR0gOxvqyPx5BCwAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 18:47:26
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.36.208 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.36.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 14:47:22.562836 2026] [security2:error] [pid 2198079:tid 2198079] [client 155.212.36.208:24911] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||magodarman.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "magodarman.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adVROpKv7k-oza39pRZA2AAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-03-04 05:20:01
(7 months ago)
2026/03/04 05:17:08 "GET /wp-login.php HTTP/1.1"
Web App Attack
🇺🇸
TPI-Abuse
2025-12-30 16:19:36
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.36.208 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.36.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 11:19:28.710904 2025] [security2:error] [pid 26825:tid 26825] [client 155.212.36.208:13163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soudertonbigred.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soudertonbigred.org"] [uri "/qatest/wp-json/wp/v2/users/"] [unique_id "aVP7kLxk7FmIFpH1ojvhIgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 11:21:14
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.36.208 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.36.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 06:21:07.419253 2025] [security2:error] [pid 4372:tid 4414] [client 155.212.36.208:62189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||heworeblack.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heworeblack.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU_BIwY9s37H9l3KwMfdmgAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
