🇲🇽
octageeks.com
2026-09-12 04:16:46
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇬🇧
gigatech
2026-09-11 12:20:06
(1 month ago)
Webserver Probing
Web App Attack
🇲🇽
octageeks.com
2026-09-11 04:10:54
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
iNetWorker
2026-09-11 02:03:17
(1 month ago)
trolling for resource vulnerabilities
Web App Attack
🇩🇪
FeG Deutschland
2026-09-10 22:55:08
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 21:18:22
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 17:18:15.944391 2026] [security2:error] [pid 11539:tid 11539] [client 83.178.219.42:53518] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lukeschicago.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lukeschicago.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqMel3X1T_wloAfvJb9BowAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-10 17:11:17
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /author-sitemap.xml | 2026-09-10 17:11 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-10 16:57:12
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 12:57:08.344779 2026] [security2:error] [pid 30695:tid 30695] [client 83.178.219.42:48952] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geckoturner.chezlubacov.xyz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geckoturner.chezlubacov.xyz"] [uri "/wp-json/wp/v2/users"] [unique_id "aqLhZPv0AapzzDC4nN7toAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 15:20:09
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 11:20:02.064391 2026] [security2:error] [pid 25023:tid 25023] [client 83.178.219.42:42034] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||montidaunitour.com.my-spec.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "montidaunitour.com.my-spec.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqLKordXsLhvEuDh7kD9ewAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 13:18:35
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 09:18:29.089234 2026] [security2:error] [pid 19805:tid 19805] [client 83.178.219.42:38422] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bonvivantorganics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bonvivantorganics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqKuJbmOiVAaH57NVAL5iwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 12:37:46
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 08:37:43.287944 2026] [security2:error] [pid 5382:tid 5382] [client 83.178.219.42:40302] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||n4fh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "n4fh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqKkl_s2h1EUjLLyUAjC6AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-10 11:28:50
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /sitemap.xml | 2026-09-10 11:28 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-10 10:21:39
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.178.219.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 06:21:35.712150 2026] [security2:error] [pid 1286:tid 1286] [client 83.178.219.42:48590] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||laura-stone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "laura-stone.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqKEr92mWZ0fpFW4ULC-_wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
