π²π½
octageeks.com
2026-10-04 04:16:36
(6 days ago)
Wordpress malicious attack:[octawp]
Web App Attack
π²π½
octageeks.com
2026-09-30 04:12:03
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
π©πͺ
ger-stg-sifi1
2026-09-29 16:29:35
(1 week ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-29 16:20:22
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 12:20:17.312838 2026] [security2:error] [pid 27293:tid 27293] [client 216.250.122.86:54438] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sutherlandyogastudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sutherlandyogastudio.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arvlQVNmqa92oEAKh7iFFwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-29 16:04:23
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 12:04:17.047358 2026] [security2:error] [pid 24931:tid 24931] [client 216.250.122.86:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ipv6.local639.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ipv6.local639.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arvhgdWGgbyNYoUEdZtAxgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
neckaralb-admin.de
2026-09-29 15:53:15
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-29 15:32:52
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 11:32:44.628827 2026] [security2:error] [pid 14808:tid 14808] [client 216.250.122.86:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pulleasy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pulleasy.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arvaHJjf589qttvQTL4qSwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
FeG Deutschland
2026-09-29 15:19:15
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
π²πΎ
Rizzy
2026-09-29 15:13:49
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-29 14:56:45
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 10:56:38.587749 2026] [security2:error] [pid 13199:tid 13199] [client 216.250.122.86:46558] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bfpsamoa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bfpsamoa.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arvRphwhxD0LX9SuONu4lQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
stinpriza
2026-09-29 14:54:07
(1 week ago)
Web App Attack
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-29 14:37:42
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 216.250.122.86 (mail.infix.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 10:37:35.110533 2026] [security2:error] [pid 13078:tid 13078] [client 216.250.122.86:48370] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rame-int.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rame-int.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arvNL9RuMLEapS4OYDzO7gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π²π½
octageeks.com
2026-09-12 04:07:47
(4 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
π³π±
ipoac.nl
2026-09-11 13:21:15
(4 weeks ago)
2026-09-11T15:21:13.508898+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 216.250.122 ...
show more
2026-09-11T15:21:13.508898+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 216.250.122.86
show less
Web App Attack
π©πͺ
LRob
2026-09-11 12:44:28
(4 weeks ago)
WordPress login brute-force | path: /wp-fi/wp-login.php (+1 more) | 2026-09-11 12:44 UTC
Brute-Force
Web App Attack