|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
ksol-hostmaster
|
|
2026/09/30 08:48:36 [error] 18188#100954: *3883985 access forbidden by rule, client: 217.64.29.182, server: new.hondaforum.hu, request: "GET /topic/fek-futomu-gumi-felni/848353/ HTTP/1.1", host: "new.hondaforum.hu"
...
|
Web Spam
|
|
🇺🇸
kosada.com
|
|
Web bot: denial-of-service flood
|
DDoS Attack
Bad Web Bot
|
|
🇩🇪
LRob
|
|
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/time_limit~1763161200/cat_ids~152,123,133,190/tag_ids~238,558,580,758,701,636/request_format~json/ | ...
show more
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/time_limit~1763161200/cat_ids~152,123,133,190/tag_ids~238,558,580,758,701,636/request_format~json/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36
show less
|
DDoS Attack
Web App Attack
|
|
🇳🇱
exxos
|
|
Attacks with Bad user agents
|
Hacking
|
|
🇳🇱
Roderic
|
|
(apache-scanners) Failed apache-scanners trigger with match [redacted])
|
Port Scan
|
|
🇳🇱
Roderic
|
|
(apache_scanners-2) Failed apache-scanners trigger with match [redacted])
|
Port Scan
|
|
🇩🇪
london2038.com
|
|
Probing for exploits
217.64.29.182 - - [31/Jul/2025:14:38:50 +0200] "GET /xmlrpc.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
217.64.29.182 - - [31/Jul/2025:14:38:50 +0200] "GET /wp-login.php HTTP/1. ...
show more
Probing for exploits
217.64.29.182 - - [31/Jul/2025:14:38:50 +0200] "GET /xmlrpc.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
217.64.29.182 - - [31/Jul/2025:14:38:50 +0200] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
show less
|
Hacking
Web App Attack
|
|
🇺🇸
ipblock.com
|
|
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇺🇦
URAN Publishing Service
|
|
217.64.29.182 - - [08/Jan/2025:16:26:51 +0200] "GET /wp-login.php HTTP/1.1" 404 2636 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
217.64.29.182 - - [08/Jan/2025:16:26:52 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mo ...
show more
217.64.29.182 - - [08/Jan/2025:16:26:51 +0200] "GET /wp-login.php HTTP/1.1" 404 2636 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
217.64.29.182 - - [08/Jan/2025:16:26:52 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
...
show less
|
Web App Attack
|
|
🇩🇪
mxbl
|
|
Scanning for CMS vulnerabilities on a non-CMS system: /wp-login.php
|
Web App Attack
|
|
🇳🇿
Tripwire
|
|
Wordpress login scanning
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 217.64.29.182 (adsl182-29.bakinter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 08:51:53.998480 2024] [security2:error] [pid 1488808:tid 1488808] [cli ...
show more
(mod_security) mod_security (id:225170) triggered by 217.64.29.182 (adsl182-29.bakinter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 08:51:53.998480 2024] [security2:error] [pid 1488808:tid 1488808] [client 217.64.29.182:63240] [client 217.64.29.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newmooncafe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newmooncafe.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z1Gv-UonbqkPQhQxuXI0HgAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 217.64.29.182 (adsl182-29.bakinter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 27 11:10:45.623500 2024] [security2:error] [pid 4140:tid 4140] [client 21 ...
show more
(mod_security) mod_security (id:225170) triggered by 217.64.29.182 (adsl182-29.bakinter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 27 11:10:45.623500 2024] [security2:error] [pid 4140:tid 4140] [client 217.64.29.182:55818] [client 217.64.29.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.americanacademyofteachersofsinging.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.americanacademyofteachersofsinging.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z0dEhRTJ002l-xKhokcW_AAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
london2038.com
|
|
Probing for exploits
217.64.29.182 - - [21/Nov/2024:14:23:03 +0100] "GET /xmlrpc.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
217.64.29.182 - - [21/Nov/2024:14:23:03 +0100] "GET /wp-login.php HTTP/1. ...
show more
Probing for exploits
217.64.29.182 - - [21/Nov/2024:14:23:03 +0100] "GET /xmlrpc.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
217.64.29.182 - - [21/Nov/2024:14:23:03 +0100] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
show less
|
Hacking
Web App Attack
|
