🇲🇽
octageeks.com
2026-10-24 04:15:54
(20 hours ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 01:27:27
(23 hours ago)
(mod_security) mod_security (id:225170) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 21:27:20.039634 2026] [security2:error] [pid 24721:tid 24721] [client 193.202.8.122:19283] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||randyshelly.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "randyshelly.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atwJeDommTPIAyVvqsuYAAAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-30 03:06:36
(3 weeks ago)
WordPress login attempt
Brute-Force
🇩🇪
FD-IX
2026-09-29 03:19:56
(3 weeks ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
🇮🇹
mgarofano80
2026-08-26 03:46:19
(1 month ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 11:36:39
(3 months ago)
(mod_security) mod_security (id:218580) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:218580) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 07:36:35.944889 2026] [security2:error] [pid 30767:tid 30767] [client 193.202.8.122:12789] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\*[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:codigo. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.||www.clubfansite.com.creartest.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.clubfansite.com.creartest.com"] [uri "/apuntarse.php"] [unique_id "aly2wypZE3VLTpswcxXARwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
sockominfo
2026-07-14 15:00:52
(3 months ago)
User login to application from malicious IP 193.202.8.122.. Threat Score: 3.9/10 (LOW). Confidence: ...
show more
User login to application from malicious IP 193.202.8.122.. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-14 14:00:52
(3 months ago)
User login to application from malicious IP 193.202.8.122.. Threat Score: 4/10 (MEDIUM). Confidence: ...
show more
User login to application from malicious IP 193.202.8.122.. Threat Score: 4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-14 13:00:53
(3 months ago)
User login to application from malicious IP 193.202.8.122.. Threat Score: 4.1/10 (MEDIUM). Confidenc ...
show more
User login to application from malicious IP 193.202.8.122.. Threat Score: 4.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-14 12:00:09
(3 months ago)
User login to application from malicious IP 193.202.8.122.. Threat Score: 0/10 (INFORMATIONAL). Repo ...
show more
User login to application from malicious IP 193.202.8.122.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇨🇭
backslash
2026-06-17 12:18:00
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-21 12:21:28
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 08:21:21.489602 2026] [security2:error] [pid 27683:tid 27683] [client 193.202.8.122:35249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kneupper.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kneupper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag74wZrd10ZQ6hOqBoOedAAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 11:10:37
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 07:10:30.927219 2026] [security2:error] [pid 1865:tid 1865] [client 193.202.8.122:51701] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||homenetserv.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "homenetserv.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agmiJuEUD7f_aizqIYZpxwAAABk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 10:25:46
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.8.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 06:25:40.163852 2026] [security2:error] [pid 16883:tid 16883] [client 193.202.8.122:41653] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||k-h-w.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k-h-w.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agWjJGD01Xi29xEQHTq-PwAAABk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-04-03 12:20:30
(6 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
