🇩🇪
FeG Deutschland
2026-10-14 06:31:16
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
karger
2026-10-13 13:20:13
(2 days ago)
Wordpress attack - soft filter
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 09:54:57
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 190.113.188.71 (190-113-188-71.supercanal.com.a ...
show more
(mod_security) mod_security (id:225170) triggered by 190.113.188.71 (190-113-188-71.supercanal.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:54:53.284410 2026] [security2:error] [pid 7037:tid 7037] [client 190.113.188.71:60748] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||justiart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "justiart.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as3_7fhtX6-29_cymrK3_QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 05:41:31
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 190.113.188.71 (190-113-188-71.supercanal.com.a ...
show more
(mod_security) mod_security (id:225170) triggered by 190.113.188.71 (190-113-188-71.supercanal.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:41:22.243524 2026] [security2:error] [pid 3317:tid 3317] [client 190.113.188.71:45138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nancyscafeandcatering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nancyscafeandcatering.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as3EgsL3lyA0F2jT2stFcAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-11 04:24:50
(4 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 20:08:29
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 190.113.188.71 (190-113-188-71.supercanal.com.a ...
show more
(mod_security) mod_security (id:225170) triggered by 190.113.188.71 (190-113-188-71.supercanal.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 16:08:21.225224 2026] [security2:error] [pid 13650:tid 13650] [client 190.113.188.71:35124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thenutritionfixhollysprings.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thenutritionfixhollysprings.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asqbNVOLgnKKTomntHxL1gAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 08:18:00
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 190.113.188.71 (190-113-188-71.supercanal.com.a ...
show more
(mod_security) mod_security (id:225170) triggered by 190.113.188.71 (190-113-188-71.supercanal.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 04:17:54.666528 2026] [security2:error] [pid 24326:tid 24457] [client 190.113.188.71:48164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||inal.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inal.org"] [uri "/wp-json/wp/v2/users"] [unique_id "asYAMv5ulzHJwztcpSZ1fQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2026-10-07 07:37:48
(1 week ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇨🇿
Countryman
2026-09-30 00:10:01
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
kosada.com
2026-08-27 04:17:58
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇳🇱
DrLex0
2026-08-22 20:08:43
(1 month ago)
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show more
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
190.113.188.71 443 - [22/Aug/2026:20:08:43 +0000] "GET [redacted] HTTP/1.1" 410 6160 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
🇺🇸
kosada.com
2026-07-26 21:47:27
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 18:28:16
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2025-11-15 06:27:06
(11 months ago)
scanning http requests from known botnet
Web App Attack
2025-10-15 03:02:00
(1 year ago)
Unauthorized connection attempt
Brute-Force
