🇺🇸
kosada.com
2026-08-31 22:07:39
(15 hours ago)
Web vulnerability probing: /wp-json/batch/v1
Web App Attack
🇫🇮
JRID
2026-08-31 18:33:29
(19 hours ago)
Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 09:24:39
(1 day ago)
(mod_security) mod_security (id:217200) triggered by 78.110.121.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217200) triggered by 78.110.121.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 05:24:28.054523 2026] [security2:error] [pid 14552:tid 14552] [client 78.110.121.91:55168] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||pakistanvision.com|F|2"] [data "/wp-json/batch/v1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "pakistanvision.com"] [uri "/wp-json/batch/v1"] [unique_id "apVITCgpt81QA9GhMVmUygAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 05:07:22
(1 day ago)
(mod_security) mod_security (id:217200) triggered by 78.110.121.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217200) triggered by 78.110.121.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:07:14.961593 2026] [security2:error] [pid 29242:tid 29242] [client 78.110.121.91:47602] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||paguilar.com|F|2"] [data "/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "paguilar.com"] [uri "/"] [unique_id "apUMAjVktPHJxVE4bGQhIwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-31 02:21:40
(1 day ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /wp-json/batch/v1 | 2026-08-31 02:21 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 19:08:11
(1 day ago)
(mod_security) mod_security (id:217200) triggered by 78.110.121.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217200) triggered by 78.110.121.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 15:07:57.560534 2026] [security2:error] [pid 3863:tid 3863] [client 78.110.121.91:53322] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||paulshorrock.com|F|2"] [data "/wp-json/batch/v1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "paulshorrock.com"] [uri "/wp-json/batch/v1"] [unique_id "apR_jYjl9tSk9gkfb5M68QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
JRID
2026-08-30 18:16:14
(1 day ago)
Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.
Brute-Force
Web App Attack
🇫🇮
inlink.ltd
2026-08-30 14:47:09
(1 day ago)
Known malicious PHP file or CMS probe
Web App Attack
🇩🇪
LRob
2026-08-30 13:40:26
(1 day ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /wp-json/batch/v1 | 2026-08-30 13:40 UTC
show less
Hacking
Web App Attack
🇫🇮
paissangroup
2026-08-30 11:24:16
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-08-30 11:06:37
(2 days ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇪🇸
alferez
2026-08-30 06:12:45
(2 days ago)
wp2shell bug exploit
Hacking
Exploited Host
Web App Attack
🇩🇪
LRob
2026-08-30 03:46:43
(2 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /wp-json/batch/v1 | 2026-08-30 03:46 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 17:12:47
(2 days ago)
(mod_security) mod_security (id:217200) triggered by 78.110.121.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217200) triggered by 78.110.121.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 13:12:41.955985 2026] [security2:error] [pid 7592:tid 7592] [client 78.110.121.91:51462] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||myersbarnescpa.com|F|2"] [data "/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "myersbarnescpa.com"] [uri "/"] [unique_id "apMTCdhTrDq95iyU0WW00AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hero2026
2026-08-29 12:45:54
(3 days ago)
Blocked by Fail2ban
Web App Attack