ππ°
ιΉιΉ
2026-09-28 14:24:03
(1 week ago)
monitor: on ser162528253480 | port: 21092 | ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Repor ...
show more
monitor: on ser162528253480 | port: 21092 | ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
π«π·
SpaceHost-Server
2026-02-12 23:35:12
(7 months ago)
Brute-Force
Web App Attack
πΉπ·
rtbh.com.tr
2026-02-12 20:11:31
(7 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
π«π·
SpaceHost-Server
2026-02-11 23:31:58
(7 months ago)
Brute-Force
Web App Attack
π©πͺ
macrob
2026-02-11 00:24:31
(8 months ago)
2026/02/11 00:24:29 [error] 71796#71796: *1588350 access forbidden by rule, client: 167.172.73.179, ...
show more
2026/02/11 00:24:29 [error] 71796#71796: *1588350 access forbidden by rule, client: 167.172.73.179, server: 100fs.org, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "100fs.org"
2026/02/11 00:24:29 [error] 71796#71796: *1588359 access forbidden by rule, client: 167.172.73.179, server: 100fs.org, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "100fs.org"
2026/02/11 00:24:30 [error] 71796#71796: *1588371 access forbidden by rule, client: 167.172.73.179, server: 100fs.org, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "100fs.org"
...
show less
Web App Attack
π³π±
homeshowdomain.nl
2026-02-10 22:59:56
(8 months ago)
Auto-ban: 216 malicious requests on 2026-02-09 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 216 malicious requests on 2026-02-09 (e.g., env/backup probes, brute-force, or error bursts).
show less
Hacking
Web App Attack
SSH
πΉπ·
rtbh.com.tr
2026-02-10 20:11:30
(8 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
π³πΏ
Antinson
2026-02-09 21:18:16
(8 months ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-02-09 16:56:50
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 167.172.73.179 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.172.73.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 11:56:44.295046 2026] [security2:error] [pid 17598:tid 17598] [client 167.172.73.179:52679] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kimbrothersduluth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kimbrothersduluth.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYoRzDlnE6yEZyV_JKLPCQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-02-09 12:26:25
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 167.172.73.179 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.172.73.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 07:26:20.389264 2026] [security2:error] [pid 27776:tid 27776] [client 167.172.73.179:59930] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.areaware-archive.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.areaware-archive.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYnSbPt-8jMsLn6I5WcrGwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
masterguru
2026-02-09 11:22:21
(8 months ago)
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operato ...
show more
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. (225170-123)
show less
Hacking
Web App Attack
πΉπ·
rtbh.com.tr
2026-02-07 20:11:27
(8 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
π§πΎ
lns.bz
2026-02-07 01:37:57
(8 months ago)
Too many 404 requests [BY]
Web App Attack
π©πͺ
kernel-error.de
2026-02-07 01:13:43
(8 months ago)
167.172.73.179 - - [07/Feb/2026:02:13:38 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 767 ...
show more
167.172.73.179 - - [07/Feb/2026:02:13:38 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 7671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
167.172.73.179 - - [07/Feb/2026:02:13:39 +0100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
167.172.73.179 - - [07/Feb/2026:02:13:39 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 7671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
167.172.73.179 - - [07/Feb/2026:02:13:39 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 7671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
167.172.73.179 - - [07/Feb/2026:02:13:40 +0100] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 76
...
show less
Web App Attack
πΊπΈ
mnsf
2026-02-07 01:05:07
(8 months ago)
Too many Status 40X (14)
Brute-Force
Web App Attack
