🇺🇸
octageeks.com
2025-03-26 04:06:32
(1 year ago)
Wordpress malicious attack:[octascan]
Web App Attack
🇲🇾
Rizzy
2025-03-25 21:21:05
(1 year ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2025-03-25 19:53:53
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 20.186.108.217 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2025-03-25 19:50:26
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 20.186.108.217 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 20.186.108.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 15:50:22.457316 2025] [security2:error] [pid 4453:tid 4453] [client 20.186.108.217:6001] [client 20.186.108.217] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||aboutagingparents.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "aboutagingparents.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-MI_ltzP_uPmDMYeTM6SQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2025-03-25 18:32:15
(1 year ago)
Site scraper
Web App Attack
🇸🇪
vaia.cloud
2025-03-25 14:16:03
(1 year ago)
trying wp-login.php/xmlrpc.php 32 times in 1 minutes
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2025-03-25 13:26:04
(1 year ago)
trying wp-login.php/xmlrpc.php 40 times in 1 minutes
Brute-Force
Web App Attack
2025-03-25 11:51:24
(1 year ago)
Inappropriate script execution attempts
Hacking
Brute-Force
🇨🇦
mitsurugi
2025-03-25 10:04:00
(1 year ago)
Probing for too many things.
Bad Web Bot
Web App Attack
2025-03-25 07:31:35
(1 year ago)
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /.well-known/pki-validation/siteindex.ph ...
show more
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /.well-known/pki-validation/siteindex.php HTTP/1.1, GET /wp-admin/media.php HTTP/1.1, GET /wp-includes/IXR/about.php HTTP/1.1, GET /cgi-bin/admin.php HTTP/1.1, GET /install.php HTTP/1.1, GET /plugins/DaoZM.php HTTP/1.1, GET /wp-includes/SimplePie/system.php HTTP/1.1, GET /wp-includes/css/about.php HTTP/1.1, GET /assets/item.php HTTP/1.1, GET /wp-content/plugins/pwnd/gecko.php HTTP/1.1, GET /cgi-bin/1.php HTTP/1.1, GET /wp-admin/install.php HTTP/1.1, GET /1.php HTTP/1.1, GET /wp-admin/network/lock.php HTTP/1.1, GET /wp-content/plugins/elementor/about.php HTTP/1.1, GET /wp-includes/fonts/about.php HTTP/1.1
show less
Hacking
Web App Attack
🇸🇪
vaia.cloud
2025-03-25 06:38:02
(1 year ago)
trying wp-login.php/xmlrpc.php 35 times in 1 minutes
Brute-Force
Web App Attack
🇫🇷
dynamix
2025-03-25 03:09:34
(1 year ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2025-03-25 00:25:53
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 20.186.108.217 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 20.186.108.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 20:25:49.791104 2025] [security2:error] [pid 2778210:tid 2778210] [client 20.186.108.217:2922] [client 20.186.108.217] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.pascoyardsale.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.pascoyardsale.com"] [uri "/ecuador.htm/images/stories/admin-post.php"] [unique_id "Z-H4Ded4lWugZ8F8nPAWnQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2025-03-24 22:52:35
(1 year ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-24 22:42:39
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 20.186.108.217 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 20.186.108.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 18:42:35.206375 2025] [security2:error] [pid 28384:tid 28384] [client 20.186.108.217:6077] [client 20.186.108.217] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||otherlander.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "otherlander.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-Hf28chsPsyEktrAgB9cAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack