🇨🇦
DRI
2026-07-18 00:13:53
(2 days ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 17:37:42
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 185.88.100.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 185.88.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:37:33.423299 2026] [security2:error] [pid 10184:tid 10184] [client 185.88.100.73:24817] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lsippell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lsippell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alpoXXqFYDs_TevqRV-3NQAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
brechtr
2026-07-17 00:33:44
(3 days ago)
[Press84-BanHammer] bad username — Sourced from: brechtryckaert.com — Request: POST /wp-login.php
Brute-Force
🇺🇸
TPI-Abuse
2026-07-16 18:27:40
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 185.88.100.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 185.88.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:27:35.055997 2026] [security2:error] [pid 18818:tid 18818] [client 185.88.100.73:35299] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jessicabaer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jessicabaer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alkil5dYZ0WGtviGz_C7zAAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 10:25:08
(1 month ago)
(mod_security) mod_security (id:211030) triggered by 185.88.100.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211030) triggered by 185.88.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 06:25:00.237917 2026] [security2:error] [pid 19792:tid 19792] [client 185.88.100.73:16151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||www.poland-yacht-registration.com|F|2"] [data "Matched Data: ('~'||( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.poland-yacht-registration.com"] [uri "/"] [unique_id "aiVG_D20wf4sqdxfsYQiAAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-26 18:46:01
(1 month ago)
SQL injection, multiple attempts.
SQL Injection
🇬🇧
[email protected]
2026-05-17 00:06:47
(2 months ago)
185.88.100.73 - - [17/May/2026:00:06:43 +0000] "GET /badges/badge.php?hash=2a8d95eb294d52604f68eb59a ...
show more
185.88.100.73 - - [17/May/2026:00:06:43 +0000] "GET /badges/badge.php?hash=2a8d95eb294d52604f68eb59a948200abbf02d4cAND%250E4030%2509IN%2504%28SELECT%250C%28%2527~%2527%2B%28SELECT%2509%28CASE%250CWHEN%250B%284030%3D4030%29%2501THEN%250D%25271%2527%2507ELSE%2503%25270%2527%250FEND%29%29%2B%2527~%2527%29%29+AND+1%3D1--+- HTTP/1.1" 200 6604 "http://www.agescotlanddementiatraining.co.uk/badges/badge.php?hash=2a8d95eb294d52604f68eb59a948200abbf02d4cAND%250E4030%2509IN%2504%28SELECT%250C%28%2527~%2527%2B%28SELECT%2509%28CASE%250CWHEN%250B%284030%3D4030%29%2501THEN%250D%25271%2527%2507ELSE%2503%25270%2527%250FEND%29%29%2B%2527~%2527%29%29+AND+1%3D1--+-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.88.100.73 - - [17/May/2026:00:06:44 +0000] "GET /badges/badge.php?hash=2a8d95eb294d52604f68eb59a948200abbf02d4c%27AND%2F%2A%2A%2F8403%3D%28SELECT%2F%2A%2A%2FUPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7C%27~%27%7C%7C%28SELECT%2F%2A%2A%2F%28CASE%2F%2A%2A%2FWHEN%2F%2A%2A%2F
...
show less
Web App Attack
🇱🇻
garmtech.com
2026-05-12 06:52:02
(2 months ago)
IM360 WAF: SQL Injection via WordPress Link functionality MV:25,EXTRACTVALUE(6142,CONCAT(0x5c,'~',(S ...
show more
IM360 WAF: SQL Injection via WordPress Link functionality MV:25,EXTRACTVALUE(6142,CONCAT(0x5c,'~',(SELECT/**/(ELT(6142=6142,1))),'~'))#
show less
SQL Injection
2026-04-18 17:05:37
(3 months ago)
Blocked: Reason='Suspicious traffic score=70 (review-based detection)'; Requests=7
Hacking
🇪🇸
masterguru
2026-04-13 13:36:40
(3 months ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (5000900-122)
Web App Attack
🇨🇭
backslash
2026-04-12 15:21:00
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-11 03:51:02
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 185.88.100.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 185.88.100.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 23:50:57.392082 2026] [security2:error] [pid 2275298:tid 2275298] [client 185.88.100.73:29723] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lbee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lbee.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adnFIYEEzdvACtojehhuHwAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
kranem
2026-04-07 00:01:56
(3 months ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 26548 (PUREVOLTAGE-INC - PureVoltage Host ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 26548 (PUREVOLTAGE-INC - PureVoltage Hosting Inc.)
Protocol: HTTP/1.1 (POST method)
Endpoint: /xmlrpc.php
Timestamp: 2026-04-06T22:56:00Z
User-Agent: AppleWebKit/539.39 (KHTML, like Gecko111)
show less
Bad Web Bot
🇺🇸
ambor
2026-03-22 13:02:14
(3 months ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-03-20 15:27:40
(3 months ago)
XML RPC Scan Activities: "2026-03-20T22:27:40.964+07:00" "/xmlrpc.php" "185.88.100.73" "AppleWebKit/ ...
show more
XML RPC Scan Activities: "2026-03-20T22:27:40.964+07:00" "/xmlrpc.php" "185.88.100.73" "AppleWebKit/533.33 (KHTML, like Gecko111)"
show less
Web App Attack
Brute-Force