2026-06-12 09:14:56
(5 days ago)
LH-Watcher: FAKE_ID [Fake Googlebot]
Bad Web Bot
2025-07-30 13:00:12
(10 months ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇬🇷
Staging
2024-03-19 08:10:00
(2 years ago)
wordpress attacks for hours
DDoS Attack
Hacking
Web App Attack
🇳🇱
vestibtech
2024-03-14 19:47:43
(2 years ago)
191.101.41.155 - - [14/Mar/2024:13:47:42 -0600] "GET /wp-includes/ID3/wp-login.php HTTP/2.0" 404 476 ...
show more
191.101.41.155 - - [14/Mar/2024:13:47:42 -0600] "GET /wp-includes/ID3/wp-login.php HTTP/2.0" 404 4764 "http://posturography.training/wp-includes/ID3/wp-login.php" "Go-http-client/2.0"
...
show less
Web App Attack
2024-03-14 06:05:43
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
oncord
2024-03-13 11:54:52
(2 years ago)
Form spam
Web Spam
2024-03-13 02:57:32
(2 years ago)
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ...
show more
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER
show less
Brute-Force
SSH
🇪🇸
10dencehispahard SL
2024-03-12 18:00:25
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇩🇪
akcurate.de
2024-03-12 15:12:22
(2 years ago)
[Tue Mar 12 16:12:18.437738 2024] [proxy_fcgi:error] [pid 1908:tid 1961] [client 191.101.41.155:6263 ...
show more
[Tue Mar 12 16:12:18.437738 2024] [proxy_fcgi:error] [pid 1908:tid 1961] [client 191.101.41.155:62633] AH01071: Got error 'Primary script unknown', referer: http://akcurate.com/text.php
[Tue Mar 12 16:12:18.777224 2024] [proxy_fcgi:error] [pid 1908:tid 1966] [client 191.101.41.155:62633] AH01071: Got error 'Primary script unknown', referer: http://akcurate.com/wp-info.php
[Tue Mar 12 16:12:19.113419 2024] [proxy_fcgi:error] [pid 1908:tid 1958] [client 191.101.41.155:62633] AH01071: Got error 'Primary script unknown', referer: http://akcurate.com/menu.php
[Tue Mar 12 16:12:20.114307 2024] [proxy_fcgi:error] [pid 1908:tid 1964] [client 191.101.41.155:62633] AH01071: Got error 'Primary script unknown', referer: http://akcurate.com/cjfuns.php
[Tue Mar 12 16:12:20.780506 2024] [proxy_fcgi:error] [pid 1908:tid 1953] [client 191.101.41.155:62633] AH01071: Got error 'Primary script unknown', referer: http://akcurate.com/fm1.php
...
show less
Brute-Force
Web App Attack
🇦🇺
MAGIC
2024-03-12 06:14:01
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-02-28 05:04:04
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 28 00:03:30.751132 2024] [security2:error] [pid 7057] [client 191.101.41.155:7867] [client 191.101.41.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cajunpicasso.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cajunpicasso.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zd6-oqCGQaMiRKW6iUrf9gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-28 02:20:42
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 21:20:19.746562 2024] [security2:error] [pid 6855] [client 191.101.41.155:63557] [client 191.101.41.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hdsniderphoto.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hdsniderphoto.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zd6YY0ANeg9QdLVurArLkQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-27 22:04:39
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 17:02:20.408874 2024] [security2:error] [pid 3350984] [client 191.101.41.155:51183] [client 191.101.41.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thefitzgeralds.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thefitzgeralds.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zd5b7HUNzdnZOW0DTg4bYwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-27 20:12:12
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 15:10:32.921465 2024] [security2:error] [pid 22039] [client 191.101.41.155:24857] [client 191.101.41.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||barriebrown.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barriebrown.com"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "Zd5BuBRpVsAYlcSRcwGY-gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-27 16:04:32
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.101.41.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 11:04:18.215428 2024] [security2:error] [pid 24418] [client 191.101.41.155:63395] [client 191.101.41.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.xoticxpressions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.xoticxpressions.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zd4IAuoNG-XuY7DqbCQmRwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack