🇩🇪
LRob
2026-09-20 05:52:56
(1 hour ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users | 2026-09-20 05:52 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 20:29:52
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients ...
show more
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 16:29:48.161687 2026] [security2:error] [pid 15986:tid 16016] [client 195.201.235.123:41676] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||executiveconsultingpr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "executiveconsultingpr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7wvHTCTSwC2dIqMr9WFQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-09-19 18:57:10
(12 hours ago)
Form spam
Web Spam
🇪🇸
akarguard.net
2026-09-19 18:49:19
(12 hours ago)
Reported by Akarguard DDoS protection: this IP exceeded the per-IP rate limit at our reverse-proxy e ...
show more
Reported by Akarguard DDoS protection: this IP exceeded the per-IP rate limit at our reverse-proxy edge (repeated HTTP 444), consistent with an automated Layer 7 flood.
show less
DDoS Attack
Web App Attack
🇮🇹
Progetto1
2026-09-19 17:45:02
(13 hours ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 17:34:22
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients ...
show more
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 13:34:16.924134 2026] [security2:error] [pid 14429:tid 14429] [client 195.201.235.123:41872] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wwfstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wwfstudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7HmM1lWZLok4yQJ2JfUQAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 14:07:41
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients ...
show more
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:07:35.686567 2026] [security2:error] [pid 3430:tid 3430] [client 195.201.235.123:43472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dungeonsremastered.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dungeonsremastered.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6XJxjbKUJvsm0RlS44LAAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 12:57:05
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients ...
show more
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 08:56:58.962049 2026] [security2:error] [pid 17482:tid 17482] [client 195.201.235.123:47260] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||boardinjapan.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boardinjapan.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6GmvVNyxjk9RzHu-GbRwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-19 12:30:05
(18 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-19 11:42:29
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients ...
show more
(mod_security) mod_security (id:225170) triggered by 195.201.235.123 (static.123.235.201.195.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 07:42:23.579651 2026] [security2:error] [pid 30091:tid 30103] [client 195.201.235.123:57502] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tomithai.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tomithai.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq51HzrMWSh0uC0FMnIXIwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-19 08:04:01
(22 hours ago)
Postfix SASL auth attack
Brute-Force
Email Spam
2026-09-19 08:03:06
(23 hours ago)
BruteForce IMAP/POP3/SMTP
Brute-Force
🇷🇺
saiva
2026-09-19 07:21:49
(23 hours ago)
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇲🇽
octageeks.com
2026-09-19 04:13:36
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇮
stinpriza
2026-09-19 02:36:35
(1 day ago)
Web App Attack
Web App Attack