🇩🇪
botreporter
2026-06-20 08:23:37
(3 hours ago)
botnet ignoring robots.txt
Bad Web Bot
2026-01-06 22:42:18
(5 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Bad Web Bot
Exploited Host
🇳🇱
exxos
2025-09-26 03:03:01
(8 months ago)
http-no-verb
Hacking
2025-07-21 07:57:06
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
ipblock.com
2025-07-21 02:32:00
(10 months ago)
IPBlock protected site ID [3192-af][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
2025-07-20 23:55:42
(10 months ago)
XMLRPC Hack Attempts
Hacking
Brute-Force
🇦🇺
Bay13
2025-07-20 23:55:17
(10 months ago)
f2b http-auth
Brute-Force
Web App Attack
🇺🇸
octageeks.com
2025-07-20 04:34:53
(11 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇩🇪
LRob.fr
2025-07-20 03:00:17
(11 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2025-07-20 01:30:05
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 21:29:57.571019 2025] [security2:error] [pid 19174:tid 19174] [client 200.0.215.47:53869] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||smilingorc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "smilingorc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aHxGlbLd0rhtQGLagL1pCwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 23:34:29
(11 months ago)
(mod_security) mod_security (id:240335) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the la ...
show more
(mod_security) mod_security (id:240335) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 19:34:23.553716 2025] [security2:error] [pid 2147:tid 2147] [client 200.0.215.47:58390] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 200.0.215.47 (+1 hits since last alert)|roguetechink.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechink.com"] [uri "/xmlrpc.php"] [unique_id "aHwrf2wbyoXjDQcVxFMxEQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-07-19 06:40:35
(11 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 200.0.215.47 (AR/Argentina/bue215-4 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 200.0.215.47 (AR/Argentina/bue215-47.is.net.ar): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 04:15:55
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 00:15:48.013474 2025] [security2:error] [pid 31187:tid 31187] [client 200.0.215.47:54378] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jbernsteinpc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jbernsteinpc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aHsb9Enry0YmGd9kCOQTQAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 16:59:54
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 12:59:51.532029 2025] [security2:error] [pid 1455:tid 1455] [client 200.0.215.47:61355] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kathydumesnilart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kathydumesnilart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aHp9h2Ikp9aEywqp4iS-qgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 22:44:09
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 200.0.215.47 (bue215-47.is.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 18:44:03.117810 2025] [security2:error] [pid 14307:tid 14307] [client 200.0.215.47:62029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||n4fh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "n4fh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aHl8s4KBayW1R_AKb9Z1bQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack