๐ฒ๐ฝ
octageeks.com
2026-10-08 04:26:55
(3 days ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-07 22:22:18
(4 days ago)
Brute-Force
Web App Attack
Anonymous
2026-10-07 16:07:04
(4 days ago)
Abuse detected: rate-limit and/or cross-site thresholds exceeded.
Bad Web Bot
๐ฉ๐ช
LRob
2026-10-07 15:32:05
(4 days ago)
Web exploit attempt | method: GET | path: // | query: author=1, author=2 | ua: Mozilla/5.0 (Windows ...
show more
Web exploit attempt | method: GET | path: // | query: author=1, author=2 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
show less
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-07 15:24:40
(4 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-07 15:13:39
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.23.107.230 (230.107.23.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.23.107.230 (230.107.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 11:13:33.352131 2026] [security2:error] [pid 24818:tid 24818] [client 34.23.107.230:55590] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.campos.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.campos.tv"] [uri "/wp-json/wp/v2/users/"] [unique_id "asZhndrrvV8ZHxnymzg2WQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
zynex
2026-10-07 15:10:48
(4 days ago)
URL Probing: /xmlrpc.php
Web App Attack
๐ง๐พ
lns.bz
2026-10-07 15:09:33
(4 days ago)
Too many 404 requests [BY]
Web App Attack
๐ฉ๐ช
JLKnoch Software GmbH
2026-10-07 15:05:53
(4 days ago)
CrowdSec crowdsecurity/http-probing
Brute-Force
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-07 15:05:10
(4 days ago)
34.23.107.230 - - [07/Oct/2026:11:05:09 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 4655 ...
show more
34.23.107.230 - - [07/Oct/2026:11:05:09 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 4655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.23.107.230 - - [07/Oct/2026:11:05:09 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.23.107.230 - - [07/Oct/2026:11:05:09 -0400] "GET //?author=1 HTTP/1.1" 301 4684 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.23.107.230 - - [07/Oct/2026:11:05:10 -0400] "GET //?author=2 HTTP/1.1" 301 4680 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.23.107.230 - - [07/Oct/2026:11:05:10 -0400] "GET //?author=3 HTTP/1.1" 301 4685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53
...
show less
Web App Attack
๐บ๐ธ
Rip
2026-10-07 15:01:16
(4 days ago)
WordPress fingerprinting and attack surface probing
Port Scan
Web App Attack
๐ซ๐ท
Stara
2026-10-07 14:55:16
(4 days ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-07 14:38:50
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.23.107.230 (230.107.23.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.23.107.230 (230.107.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 10:38:43.155607 2026] [security2:error] [pid 2303:tid 2303] [client 34.23.107.230:63197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.directcch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.directcch.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asZZc0Dr2Ceo_6Xgz0gxfgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
ToJa
2026-10-07 14:36:47
(4 days ago)
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot):
2026/10/07 16:36:42 [info] 824 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot):
2026/10/07 16:36:42 [info] 82443#82443: *274 client prematurely closed connection while reading client pipelined request line, client: 34.23.107.230, server: _
show less
Web App Attack
๐บ๐ธ
cwytech
2026-10-07 14:35:09
(4 days ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wordpress-xmlrpc-bf-high.
Bad Web Bot
Web App Attack