๐ธ๐ฌ
Vano Ganzzz
2025-10-28 00:07:47
(11 months ago)
Triggered Cloudflare WAF (firewallCustom) from TR.
Action taken: BLOCK
ASN: 12735 (ASTURKNET)
Protoc ...
show more
Triggered Cloudflare WAF (firewallCustom) from TR.
Action taken: BLOCK
ASN: 12735 (ASTURKNET)
Protocol: HTTP/1.1 (GET method)
Endpoint: /inputs.php
Timestamp: 2025-10-28T00:07:47Z
Ray ID: 995631e96ef492d2
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36
show less
Bad Web Bot
Anonymous
2025-10-27 20:58:55
(11 months ago)
fail2ban apache-modsecurity web [msg "php scripts are not allowed here"] [uri "/info.php"]
Web App Attack
Anonymous
2025-10-26 21:03:33
(11 months ago)
wordpress-trap
Web App Attack
๐ฑ๐ป
garmtech.com
2025-10-26 10:59:24
(11 months ago)
IM360 WAF: Interaction with fake plugin MV:/wp-content/plugins/WordPressCore/include.php
Web App Attack
๐ฉ๐ช
HERA - Operations
2025-10-26 04:57:57
(11 months ago)
herrmann - searching for vulnerable scripts: mootools.js 2025/10/26 05:57:57
Web App Attack
๐ฎ๐ฉ
Burayot
2025-10-26 01:38:36
(11 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 188.119.62.230 (TR/Tรผrkiye/230.62.1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 188.119.62.230 (TR/Tรผrkiye/230.62.119.188.srv.turk.net): 1 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
ipblock.com
2025-10-25 17:36:00
(11 months ago)
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
๐ง๐ฌ
Filipe Dรกvila
2025-10-25 14:51:50
(11 months ago)
[Sat Oct 25 10:51:48.584652 2025] [:error] [pid 351697:tid 140273321449216] [client 188.119.62.230:6 ...
show more
[Sat Oct 25 10:51:48.584652 2025] [:error] [pid 351697:tid 140273321449216] [client 188.119.62.230:62815] [client 188.119.62.230] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/phpinfo.php"] [unique_id "aPzkBMOfRRIb@sO6Vk-SGAAAAIE"]
show less
Web App Attack
๐ฉ๐ช
FeG Deutschland
2025-10-25 02:43:37
(11 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
๐ฉ๐ช
Vegascosmetics
2025-10-24 21:51:45
(11 months ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-10-24 20:25:16
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 188.119.62.230 (230.62.119.188.srv.turk.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.119.62.230 (230.62.119.188.srv.turk.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 24 16:25:10.211738 2025] [security2:error] [pid 24206:tid 24206] [client 188.119.62.230:61691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fattoria-rendena.it|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fattoria-rendena.it"] [uri "/wp-json/wp/v2/users"] [unique_id "aPvgplqfG0PXcHRHp4UxdAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-10-24 17:23:37
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 188.119.62.230 (230.62.119.188.srv.turk.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.119.62.230 (230.62.119.188.srv.turk.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 24 13:23:32.362010 2025] [security2:error] [pid 30826:tid 30826] [client 188.119.62.230:62158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||babylontravelone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "babylontravelone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPu2FOL4C6eZnanuSWQTVQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-10-24 05:55:00
(11 months ago)
wordpress-trap
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-10-23 20:21:07
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 188.119.62.230 (230.62.119.188.srv.turk.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.119.62.230 (230.62.119.188.srv.turk.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 16:21:00.739961 2025] [security2:error] [pid 18891:tid 18891] [client 188.119.62.230:61874] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||protection4allsecurity.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "protection4allsecurity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPqOLDBhg7zLIlo-oOKrnQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
barbarella
2025-10-23 14:49:35
(11 months ago)
search JavaScript Security Vulnerabilities (GET /wp-content/plugins/drag-and-drop-multiple-file-uplo ...
show more
search JavaScript Security Vulnerabilities (GET /wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/codedropz-uploader-min.js)
show less
Hacking
Web App Attack