๐บ๐ธ
rhandorf
2026-10-12 11:47:42
(6 days ago)
Multiple web server 400 error codes from same source ip. (9 events) - reported by a home network SIE ...
show more
Multiple web server 400 error codes from same source ip. (9 events) - reported by a home network SIEM
show less
Port Scan
Web App Attack
๐บ๐ธ
jcbriar
2026-10-12 09:42:11
(6 days ago)
Searching for vulnerable scripts
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 09:30:49
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 8.234.144.26 (26.144.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 8.234.144.26 (26.144.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:30:45.964437 2026] [security2:error] [pid 9373:tid 9373] [client 8.234.144.26:60230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jazziiafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jazziiafoundation.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "asyoxfji7kZ3VV8fe_MRhQAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-12 09:20:10
(6 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-10-12 09:19:03
(6 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
๐ช๐ธ
robotstxt
2026-10-12 09:18:54
(6 days ago)
8.234.144.26 - - [12/Oct/2026:09:18:52 +0000] "" 400 0 "-" "-" "-" edge="8.234.144.26"
8.234.144.26 ...
show more
8.234.144.26 - - [12/Oct/2026:09:18:52 +0000] "" 400 0 "-" "-" "-" edge="8.234.144.26"
8.234.144.26 - - [12/Oct/2026:09:18:52 +0000] "" 400 0 "-" "-" "-" edge="8.234.144.26"
8.234.144.26 - - [12/Oct/2026:09:18:52 +0000] "" 400 0 "-" "-" "-" edge="8.234.144.26"
8.234.144.26 - - [12/Oct/2026:09:18:52 +0000] "" 400 0 "-" "-" "-" edge="8.234.144.26"
8.234.144.26 - - [12/Oct/2026:09:18:52 +0000] "" 400 0 "-" "-" "-" edge="8.234.144.26"
...
show less
Web Spam
Web App Attack
๐ฉ๐ช
jasperedv.de
2026-10-12 09:14:13
(6 days ago)
Apache Login - Brutforcing
Web App Attack
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-12 09:13:28
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 8.234.144.26 (26.144.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 8.234.144.26 (26.144.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:13:23.022043 2026] [security2:error] [pid 20301:tid 20301] [client 8.234.144.26:55008] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tttns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tttns.com"] [uri "/about-jason/wp-json/wp/v2/users/"] [unique_id "asyksxFF7BhD7XDkdRXk7gAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-10-12 09:09:27
(6 days ago)
Probing websites for vulnerabilities
Web App Attack
๐บ๐ธ
mnsf
2026-10-12 09:05:36
(6 days ago)
Abuse Detected (6)
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-12 09:02:25
(6 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ฉ๐ช
big-cloud.nl
2026-10-12 09:01:52
(6 days ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐ฉ๐ช
Jarda_H
2026-10-12 09:00:38
(6 days ago)
wordpress-scan Attack Detected
Web App Attack
๐จ๐ญ
Origon
2026-10-12 09:00:03
(6 days ago)
http-probing - IP: 8.234.144.26 - time="2026-10-12T11:00:02+02:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 8.234.144.26 - time="2026-10-12T11:00:02+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 8.234.144.26 (US/396982) : 4h ban on Ip 8.234.144.26" module=db
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 08:55:03
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 8.234.144.26 (26.144.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 8.234.144.26 (26.144.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:54:57.258112 2026] [security2:error] [pid 12844:tid 12844] [client 8.234.144.26:53293] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||janyoors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "janyoors.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asygYRMmr7QMDwo7lVQOKgAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack