🇸🇪
vaia.cloud
2026-06-02 12:51:01
(2 days ago)
trying wp-login.php/xmlrpc.php 53 times in 1 minutes
Brute-Force
Web App Attack
🇺🇸
LSPCCU
2026-05-14 09:31:47
(3 weeks ago)
TSEC Honeypot Network report. Threat score: 68/100. Categories: Hacking. Honeypot: cowrie, ssh-telne ...
show more
TSEC Honeypot Network report. Threat score: 68/100. Categories: Hacking. Honeypot: cowrie, ssh-telnet. Context: 65.
show less
Hacking
🇺🇸
octageeks.com
2026-03-28 04:08:00
(2 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
2026-03-26 17:40:28
(2 months ago)
Forum/form spam
Web Spam
🇩🇪
kjaerulff
2026-03-17 15:57:44
(2 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
2026-03-01 15:53:42
(3 months ago)
Forum/form spam
Web Spam
🇬🇧
relianoid.com
2026-02-22 16:57:22
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
TPI-Abuse
2026-02-11 16:58:57
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 11:58:50.394142 2026] [security2:error] [pid 26527:tid 26527] [client 65.111.6.87:31569] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jiggaboojones.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jiggaboojones.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYy1SgUU4ZxJP1d6l35iAQAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-28 05:30:46
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2026-01-05 16:57:59
(4 months ago)
Infected user bad webscan
Exploited Host
🇺🇸
TPI-Abuse
2025-12-30 15:33:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 10:33:41.820065 2025] [security2:error] [pid 1967:tid 1967] [client 65.111.6.87:28861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nuevo.allcostaricarentals.com"] [uri "/.git/HEAD"] [unique_id "aVPw1Rqgg4oiymLZR51wVAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 14:11:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 09:11:24.994404 2025] [security2:error] [pid 3520:tid 3520] [client 65.111.6.87:55857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gilgoinn.com"] [uri "/.git/HEAD"] [unique_id "aS7zjEcZnRBZEjnqmD9vbgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 08:28:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:28:11.932492 2025] [security2:error] [pid 424358:tid 424469] [client 65.111.6.87:14723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "byronbayguesthouse.com"] [uri "/.git/HEAD"] [unique_id "aS6jG_p__Pmf5kEIOQBajwAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 08:02:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:02:35.769376 2025] [security2:error] [pid 13734:tid 13734] [client 65.111.6.87:42377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loupgaroubooks.com"] [uri "/.git/HEAD"] [unique_id "aS6dG2O6JhJAgOaqZqpwMwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:45:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.6.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:45:35.575016 2025] [security2:error] [pid 27849:tid 27849] [client 65.111.6.87:23651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lusocleaningservice.com"] [uri "/.svn/wc.db"] [unique_id "aS6ZH47C6iTlC7b1rkS2PAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack