🇺🇸
TPI-Abuse
2026-10-09 09:33:48
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 218.235.199.252 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 218.235.199.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 05:33:43.941622 2026] [security2:error] [pid 7357:tid 7405] [client 218.235.199.252:43496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||condo.management|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "condo.management"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asi09y3Y4z8OQoB_pOB6awAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-02 11:44:05
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
2026-09-30 10:54:06
(1 week ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
🇩🇪
FeG Deutschland
2026-09-29 13:58:24
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 08:53:02
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 218.235.199.252 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 218.235.199.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 04:52:56.941579 2026] [security2:error] [pid 20253:tid 20253] [client 218.235.199.252:55526] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||athletefirst.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "athletefirst.org"] [uri "/wp-json/wp/v2/users"] [unique_id "art8aNCK_DTeBqX_SXCWsAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
abuseiphack
2026-09-26 11:40:29
(1 week ago)
Automatic report for brute force attack
Bad Web Bot
🇲🇽
octageeks.com
2026-09-23 04:19:43
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 14:06:52
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 218.235.199.252 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 218.235.199.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 10:06:47.388458 2026] [security2:error] [pid 27088:tid 27140] [client 218.235.199.252:44496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||property-management.company|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "property-management.company"] [uri "/wp-json/wp/v2/users"] [unique_id "arE59x0Lt8Jq8alLk_bjGwAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-20 07:02:24
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-09-16 10:19:47
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇪🇸
masterguru
2026-09-16 09:58:19
(3 weeks ago)
*Port Scan* detected from 218.235.199.252 (KR/South Korea/-). 11 hits in the last 217 seconds (0-122 ...
show more
*Port Scan* detected from 218.235.199.252 (KR/South Korea/-). 11 hits in the last 217 seconds (0-122)
show less
Port Scan
🇲🇽
octageeks.com
2026-09-13 04:14:04
(3 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇳🇱
maxxsense
2026-09-12 09:28:10
(3 weeks ago)
(wordpress) Failed wordpress login from 218.235.199.252 (KR/South Korea/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 12:28:24
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 218.235.199.252 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 218.235.199.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:28:17.508276 2026] [security2:error] [pid 24233:tid 24279] [client 218.235.199.252:60076] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dontbeajerklikeyourwork.com.teritemme.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dontbeajerklikeyourwork.com.teritemme.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ap__Yab7n-O4DJNSdmHc7AAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-08 10:33:21
(1 month ago)
(wordpress) Failed wordpress login from 218.235.199.252 (KR/South Korea/Gyeonggi-do/Namyangju/-/[red ...
show more
(wordpress) Failed wordpress login from 218.235.199.252 (KR/South Korea/Gyeonggi-do/Namyangju/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
