🇲🇽
octageeks.com
2026-07-05 04:11:31
(2 days ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 22:45:30
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 158.180.33.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 158.180.33.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 18:45:23.605086 2026] [security2:error] [pid 18671:tid 18671] [client 158.180.33.171:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rodrigoaldecoa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rodrigoaldecoa.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akmNA98RzvX4ns5HDOmHrwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-07-04 14:16:03
(2 days ago)
Wordfence waf block on 1105merrystreet
Web App Attack
🇩🇪
4server
2026-07-04 13:23:27
(2 days ago)
[SatJul0415:23:25.2925732026][security2:error][pid1555796:tid1555917][client158.180.33.171:0]ModSecu ...
show more
[SatJul0415:23:25.2925732026][security2:error][pid1555796:tid1555917][client158.180.33.171:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.alessandrolucchini.ch\"][uri\"/wp-login.php\"][unique_id\"akkJTX_9NjD-pV5XGirqfwAAAQg\"]\,referer:https://mail.alessandrolucchini.ch/wp-login.php
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-07-04 10:25:44
(2 days ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 158.180.33.171 (DE/Germany/-): 1 in the last ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 158.180.33.171 (DE/Germany/-): 1 in the last 3600 secs (0-196)
show less
Hacking
2026-07-04 05:11:21
(2 days ago)
<jail> banned by fail2ban
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-07-04 04:05:05
(3 days ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-07-04 00:28:45
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇮🇹
Progetto1
2026-07-03 13:30:02
(3 days ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
cwytech
2026-07-03 11:47:20
(3 days ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.
Bad Web Bot
Web App Attack
🇷🇴
iulianh
2026-07-03 11:38:09
(3 days ago)
80,443
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-07-03 11:09:42
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 158.180.33.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 158.180.33.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 07:09:35.938029 2026] [security2:error] [pid 2978:tid 2978] [client 158.180.33.171:43736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||losbarbarosdelnorte.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "losbarbarosdelnorte.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akeYb1bKAobh2B36WGRO5QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 10:47:58
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 158.180.33.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 158.180.33.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 06:47:51.822631 2026] [security2:error] [pid 32616:tid 32616] [client 158.180.33.171:52178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||415test.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "415test.com"] [uri "/wp-json/wp/v2/users/5"] [unique_id "akeTV16sqF7MYjqFoyuLPgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
AvonleaConsulting
2026-07-03 09:16:01
(3 days ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 08:29:31
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 158.180.33.171 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 158.180.33.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 04:29:23.923497 2026] [security2:error] [pid 26034:tid 26034] [client 158.180.33.171:44000] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gellertdealers.totalstorage.solutions|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gellertdealers.totalstorage.solutions"] [uri "/wp-json/wp/v2/users"] [unique_id "akdy4_lL2rDFajOvUZY3XgAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack