🇺🇸
kosada.com
2026-08-01 21:40:59
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-07-28 12:54:17
(2 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
🇺🇸
kosada.com
2026-07-28 05:35:29
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇹🇷
rtbh.com.tr
2025-10-14 20:09:21
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-10-14 00:09:20
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-10-13 20:09:20
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2025-10-13 01:48:53
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 178.128.49.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.49.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 21:48:46.247252 2025] [security2:error] [pid 20998:tid 20998] [client 178.128.49.144:58113] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.xhumanlikerobots.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.xhumanlikerobots.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOxafnW1c_D9jUrtn7059gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-12 19:01:24
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 178.128.49.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.49.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 15:01:18.751117 2025] [security2:error] [pid 31574:tid 31574] [client 178.128.49.144:49471] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cedricleejones.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cedricleejones.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOv6_jYF7M83Nhhr2b3_vwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paulrusiecki
2025-10-12 15:39:20
(1 year ago)
178.128.49.144 - - [12/Oct/2025:17:39:19 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 645 ...
show more
178.128.49.144 - - [12/Oct/2025:17:39:19 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.49.144 - - [12/Oct/2025:17:39:20 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.49.144 - - [12/Oct/2025:17:39:20 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-10-12 15:31:11
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 178.128.49.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.49.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 11:31:07.167604 2025] [security2:error] [pid 22326:tid 22326] [client 178.128.49.144:58240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ghmuganda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ghmuganda.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOvJu681IuoDzpuDjF9fMQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2025-10-12 14:08:29
(1 year ago)
(wordpress) Failed wordpress login from 178.128.49.144 (SG/Singapore/-)
Brute-Force
🇦🇺
Rey
2025-10-12 14:04:02
(1 year ago)
WordPress xmlrpc.php attack [bcfb8cyq]
Web App Attack
🇮🇹
VHosting
2025-10-12 13:30:05
(1 year ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
mnsf
2025-10-12 13:05:28
(1 year ago)
Too many Status 40X (29)
Scanning/Probing (11)
Brute-Force
Web App Attack
2025-10-12 12:27:39
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH