🇲🇽
octageeks.com
2026-08-31 04:23:42
(30 minutes ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
eposs-it.de
2026-08-31 04:15:13
(39 minutes ago)
Blocked by os-abuseipdb; 20 hits, proto=tcp, ports=443,80
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-08-31 02:27:03
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 22:26:58.287770 2026] [security2:error] [pid 3264710:tid 3264718] [client 194.233.93.231:38360] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chelseyrae.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chelseyrae.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apTmcqAvEFMRK6iFKTDGGQAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 01:44:48
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 21:44:43.648713 2026] [security2:error] [pid 9520:tid 9520] [client 194.233.93.231:39722] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soundtrax.net"] [uri "/wp-json/wp/v2/users"] [unique_id "apTcizqLovSDx5_0sW8LVAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
rdpguard.com
2026-08-31 01:25:25
(3 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2026-08-31 01:23:39
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 21:23:30.943758 2026] [security2:error] [pid 10619:tid 10619] [client 194.233.93.231:60766] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||scswat.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scswat.org"] [uri "/wp-json/wp/v2/users"] [unique_id "apTXkiTjypsfMkM5AjVLxwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 01:02:22
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 21:02:17.912883 2026] [security2:error] [pid 18424:tid 18424] [client 194.233.93.231:48430] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pathpa.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pathpa.org"] [uri "/wp-json/wp/v2/users"] [unique_id "apTSmZHwsjf3e5id8yUYMwAAAAo"], referer: http://pathpa.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-08-31 00:55:51
(3 hours ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users | 2026-08-31 00:55 UTC
show less
Hacking
Web App Attack
🇳🇿
Tripwire
2026-08-31 00:50:57
(4 hours ago)
Probing for Wordpress - /wp-login.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 00:15:25
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 20:15:21.336554 2026] [security2:error] [pid 25744:tid 25744] [client 194.233.93.231:41418] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tedharris.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tedharris.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apTHmaqyzKwNommhxkSg8wAAAAc"], referer: http://tedharris.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-31 00:04:37
(4 hours ago)
Web vulnerability probing: /wp-login.php
Web App Attack
🇫🇷
dynamix
2026-08-30 23:53:17
(5 hours ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 23:40:11
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 194.233.93.231 (vmi2868147.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 19:40:07.757433 2026] [security2:error] [pid 8756:tid 8756] [client 194.233.93.231:44602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ixd.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ixd.net"] [uri "/wp-json/wp/v2/users"] [unique_id "apS_V-cFG8NsDpWFhYNjaAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
etu brutus
2026-08-30 23:38:37
(5 hours ago)
194.233.93.231 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-08-30 23:13:28
(5 hours ago)
WP User Enumeration, WP login POST blocked by WAF
Brute-Force
Web App Attack
