🇦🇺
Delta Juliet
2025-12-15 23:43:32
(8 months ago)
Exploit scanner detected
Hacking
Web App Attack
2025-12-12 13:03:18
(8 months ago)
Blocked: Reason='Auto-block via DW'; Requests=0
Hacking
🇺🇸
TPI-Abuse
2025-12-08 09:20:26
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 167.99.165.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.165.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 04:20:21.281492 2025] [security2:error] [pid 24582:tid 24582] [client 167.99.165.127:51276] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.godcanuseyou.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.godcanuseyou.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTaYVTuqw8LEsCtLFYA_EwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Delta Juliet
2025-12-08 00:22:19
(8 months ago)
Exploit scanner detected
Hacking
Web App Attack
🇺🇸
S.O.B.A. Dev.
2025-12-07 22:40:14
(8 months ago)
Threat Blocked by BeeHive from (ASN:14061) (Network:DIGITALOCEAN-ASN) (Host:soba.dev) (Method:GET) ( ...
show more
Threat Blocked by BeeHive from (ASN:14061) (Network:DIGITALOCEAN-ASN) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-12-07T22:40:14Z)
show less
Web Spam
Brute-Force
Web App Attack
🇳🇱
Savvii
2025-12-07 14:50:23
(8 months ago)
11 attempts against mh_ha-misc-ban on hydra
Brute-Force
Web App Attack
🇳🇱
Savvii
2025-12-07 14:10:59
(8 months ago)
10 attempts against mh_ha-misc-ban on hydra
Brute-Force
Web App Attack
🇮🇱
Dolphi
2025-12-06 05:10:03
(8 months ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 04:08:50
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 167.99.165.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.165.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 23:08:44.464444 2025] [security2:error] [pid 9448:tid 9467] [client 167.99.165.127:65485] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gilesrentalcars.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gilesrentalcars.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTOsTM2PrpORuqgAQO664QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2025-12-05 22:01:51
(8 months ago)
17.076 POST requests in 1 hour (36613172600yrs2mos4w)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-05 21:05:45
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 167.99.165.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.165.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 16:05:37.169854 2025] [security2:error] [pid 21845:tid 21845] [client 167.99.165.127:50403] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ggaccounting.services|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ggaccounting.services"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTNJIUSn1wyPa1uH9CPRgwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2025-12-05 18:06:25
(8 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
Site.eu
2025-12-05 13:17:02
(8 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-12-05 09:12:37
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 167.99.165.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.165.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:12:30.947844 2025] [security2:error] [pid 16901:tid 17082] [client 167.99.165.127:55397] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgementz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgementz.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTKh_gg4lzGtclimz763cQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-04 10:44:13
(8 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php?rsd
Hacking