🇫🇷
dynamix
2026-07-23 05:58:18
(3 hours ago)
Multiple WAF Violations
Web App Attack
2026-07-23 04:03:29
(4 hours ago)
PARMACOM WEBEXPLOIT 185.202.108.75 (185.202.108.75)
Web App Attack
🇺🇸
ambor
2026-07-21 01:53:37
(2 days ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇪🇨
icp77
2026-07-20 19:30:00
(2 days ago)
Abuse DDoS
DDoS Attack
Port Scan
Brute-Force
Exploited Host
Web App Attack
SSH
FTP Brute-Force
Hacking
SQL Injection
🇪🇸
librebit
2026-07-03 08:32:39
(2 weeks ago)
Brute force
Brute-Force
🇺🇸
NetVexor
2026-07-02 02:43:36
(3 weeks ago)
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan
Hacking
Brute-Force
🇩🇪
filstal.org
2026-06-17 17:37:33
(1 month ago)
WordPress login brute-force detected.
Brute-Force
Web App Attack
🇩🇪
4server
2026-06-05 11:17:32
(1 month ago)
[FriJun0513:17:26.9619172026][security2:error][pid655545:tid655676][client185.202.108.75:0]ModSecuri ...
show more
[FriJun0513:17:26.9619172026][security2:error][pid655545:tid655676][client185.202.108.75:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.gustotondo.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiKwRtT5EwwUS74IRiKebAAAARM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-05-25 14:57:55
(1 month ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-19 08:14:09
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 185.202.108.75 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.202.108.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 04:14:05.026752 2026] [security2:error] [pid 32482:tid 32579] [client 185.202.108.75:11591] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||progenicyte.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "progenicyte.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agwbzdNv0v2glDuzgn7c-AAAAQs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 18:01:12
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 185.202.108.75 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.202.108.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 14:01:09.033333 2026] [security2:error] [pid 19255:tid 19255] [client 185.202.108.75:29513] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||g-h2o.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "g-h2o.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeuv5XkEy_ej_6nXnQxp2gAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 00:57:21
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 185.202.108.75 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.202.108.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 20:57:14.251800 2026] [security2:error] [pid 1185066:tid 1185066] [client 185.202.108.75:57833] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||friends-ytc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "friends-ytc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad7iagmghY2ugQ63QObdSAAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-16 21:51:00
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-10 11:19:47
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 185.202.108.75 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.202.108.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 07:19:39.755194 2026] [security2:error] [pid 10178:tid 10178] [client 185.202.108.75:31959] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gkwire.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gkwire.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aa_-S5oLvxbyOYaYnFKnCgAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-10 09:53:06
(4 months ago)
Failed Wordpress login using wp-login.php
Web App Attack