π²π½
octageeks.com
2026-10-17 04:16:12
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
π²πΉ
Malta
2026-10-16 17:12:12
(2 days ago)
212.164.179.67 - - [16/Oct/2026:19:12:12 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
212.164.179.67 - - [16/Oct/2026:19:12:12 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
πΊπΈ
TPI-Abuse
2026-10-15 00:09:16
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 212.164.179.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.164.179.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:09:09.495309 2026] [security2:error] [pid 5137:tid 5137] [client 212.164.179.67:3351] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drgtek.com.smogsandiego.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drgtek.com.smogsandiego.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atAZpWDTlyD8t6opL3To9gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π²π½
octageeks.com
2026-10-14 04:16:02
(4 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
π«π·
mrcrassi
2026-10-13 20:13:38
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from RU.
Action taken: BLOCK
Protocol: HTTP/2 (POST method ...
show more
Triggered Cloudflare WAF (firewallCustom) from RU.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-10-13 19:19:34
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 212.164.179.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.164.179.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 15:19:28.916253 2026] [security2:error] [pid 12521:tid 12521] [client 212.164.179.67:5184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||certifiedfarmersmarkets.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "certifiedfarmersmarkets.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as6EQNwOZmXso07A8G6D3gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-12 19:03:34
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 212.164.179.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.164.179.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:03:28.402731 2026] [security2:error] [pid 1520:tid 1520] [client 212.164.179.67:6885] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||constructionloansfunding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "constructionloansfunding.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as0vAPlD_6g_R18AJlHvgwAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
ππ°
mutebot.net
2026-10-12 18:50:15
(6 days ago)
SRC=212.164.179.67, PROTO=TCP, SPT=3834, DPT=23
Port Scan
π©πͺ
Packets-Decreaser.NET
2026-10-12 15:32:52
(6 days ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
π©πͺ
nyuuzyou
2026-09-08 07:13:14
(1 month ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show more
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-08T07:13:14Z.
show less
Bad Web Bot
Anonymous
2026-06-23 14:46:52
(3 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot