Anonymous
2026-10-23 02:05:48
(5 days ago)
apache vulnerability scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 12:34:24
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacifi ...
show more
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 08:34:18.472078 2026] [security2:error] [pid 31426:tid 31457] [client 190.114.39.47:3161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lamcohomecare.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lamcohomecare.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atoCyphqf_-KDxyGriEFHQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 08:13:14
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacifi ...
show more
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 04:13:10.779138 2026] [security2:error] [pid 24092:tid 24092] [client 190.114.39.47:3068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||salernospizza.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "salernospizza.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atnFlqYGw95SuDT-XgFvpwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 14:17:13
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacifi ...
show more
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:17:08.888064 2026] [security2:error] [pid 7091:tid 7091] [client 190.114.39.47:3222] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||warpedweed.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "warpedweed.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atjJZJM_YIx6rHJ9ooH0IwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 10:31:20
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacifi ...
show more
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:31:14.959416 2026] [security2:error] [pid 29561:tid 29561] [client 190.114.39.47:3244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rockinr.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rockinr.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atiUcsjk_GlXnWl1WygUvQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
georgengelmann
2026-10-20 17:19:58
(1 week ago)
Failed login attempt for superuser
Brute-Force
Web App Attack
๐บ๐ธ
cwytech
2026-10-20 12:57:38
(1 week ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wordpress-login-lockdown-high.
Bad Web Bot
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-10-19 04:07:44
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-19 03:04:54
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐ซ๐ท
LRob
2026-10-19 00:39:46
(1 week ago)
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ฉ๐ช
LRob
2026-10-18 05:33:05
(1 week ago)
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ฉ๐ช
FeG Deutschland
2026-10-15 09:20:50
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
Anonymous
2026-10-13 16:37:07
(2 weeks ago)
apache vulnerability scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 09:24:46
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacifi ...
show more
(mod_security) mod_security (id:225170) triggered by 190.114.39.47 (host190.114.39.47.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:24:38.794717 2026] [security2:error] [pid 23329:tid 23329] [client 190.114.39.47:3020] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||buanamegah.kairoslogammakmur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buanamegah.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as341lSloyW3SCQ3WfLLtQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Packets-Decreaser.NET
2026-10-11 01:18:23
(2 weeks ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam