๐ณ๐ฑ
Site.eu
2026-10-28 07:34:19
(3 hours ago)
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
Hacking
Web App Attack
๐บ๐ธ
HJ5Ss4Ju
2026-10-27 05:17:31
(1 day ago)
Wordfence firewall block
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 15:53:53
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 194.246.91.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.246.91.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:53:48.646638 2026] [security2:error] [pid 3820:tid 3820] [client 194.246.91.58:59424] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lawrencehale.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lawrencehale.net"] [uri "/wp-json/wp/v2/users"] [unique_id "at93jI2oJSdH0dcc4n8VcAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
FireGuard Server
2026-10-26 08:35:20
(2 days ago)
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443
Port Scan
Hacking
๐บ๐ธ
mawan
2026-10-25 11:03:41
(3 days ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
HJ5Ss4Ju
2026-10-25 09:17:23
(3 days ago)
Wordfence firewall block
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-24 06:21:32
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 194.246.91.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.246.91.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:21:24.251594 2026] [security2:error] [pid 30145:tid 30145] [client 194.246.91.58:34476] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ohiohca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ohiohca.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atxOZNpm8tdqA_6FXYPsJQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 06:54:15
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 194.246.91.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.246.91.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 02:54:07.616427 2026] [security2:error] [pid 3760:tid 3760] [client 194.246.91.58:37414] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.drbolen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.drbolen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "athhj7Tgr08x-GzQNa2XNQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-15 02:00:26
(1 week ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-14 22:30:38
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 194.246.91.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.246.91.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:30:29.945258 2026] [security2:error] [pid 28373:tid 28373] [client 194.246.91.58:60262] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oakvillenaturopathicclinic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oakvillenaturopathicclinic.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atAChVFcZpGMGcygo9zw2gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-10-10 04:50:03
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-29 12:59:19
(4 weeks ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-22 11:33:12
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
show less
Bad Web Bot
๐บ๐ธ
kosada.com
2026-08-24 14:40:32
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
kosada.com
2026-08-23 13:28:42
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
