Anonymous
2026-10-27 02:48:35
(23 hours ago)
Apache vulnerability scan
Brute-Force
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-10-25 04:12:43
(2 days ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
๐ฒ๐น
Malta
2026-10-24 22:07:48
(3 days ago)
88.190.141.41 - - [25/Oct/2026:00:07:47 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
88.190.141.41 - - [25/Oct/2026:00:07:47 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
๐ฉ๐ช
iNetWorker
2026-10-24 10:57:07
(3 days ago)
trolling for resource vulnerabilities
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-24 07:36:18
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 88.190.141.41 (88-190-141-41.subs.proxad.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 88.190.141.41 (88-190-141-41.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:36:13.730299 2026] [security2:error] [pid 27419:tid 27419] [client 88.190.141.41:1376] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||goseethenurse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goseethenurse.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atxf7QjCYP0cBS-ECuF85wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
ofm-abuse
2026-10-20 11:02:32
(1 week ago)
Brute-force
...
Brute-Force
Web App Attack
Bad Web Bot
๐ฉ๐ช
georgengelmann
2026-10-20 07:15:04
(1 week ago)
Failed login attempt for pedro
Brute-Force
Web App Attack
๐ฒ๐น
Malta
2026-10-19 11:15:01
(1 week ago)
88.190.141.41 - - [19/Oct/2026:13:15:01 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ...
show more
88.190.141.41 - - [19/Oct/2026:13:15:01 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
๐จ๐ญ
4server
2026-10-18 21:33:11
(1 week ago)
[SunOct1823:33:06.8961912026][security2:error][pid3528505:tid3528630][client88.190.141.41:0]ModSecur ...
show more
[SunOct1823:33:06.8961912026][security2:error][pid3528505:tid3528630][client88.190.141.41:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mondo-it.ch\"][uri\"/xmlrpc.php\"][unique_id\"atU7EuxcUBqyeh0QgfhbdAAAARQ\"]
show less
Hacking
Web App Attack
๐ฒ๐น
Malta
2026-10-17 18:08:00
(1 week ago)
88.190.141.41 - - [17/Oct/2026:20:07:59 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ...
show more
88.190.141.41 - - [17/Oct/2026:20:07:59 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 02:27:00
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 88.190.141.41 (88-190-141-41.subs.proxad.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 88.190.141.41 (88-190-141-41.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 22:26:53.705955 2026] [security2:error] [pid 28548:tid 28548] [client 88.190.141.41:7224] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||solporpoise.com.herston.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "solporpoise.com.herston.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atLc7V1f5mfGPQWt0Y7sTQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
stinpriza
2026-10-16 16:52:45
(1 week ago)
Web App Attack
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-16 15:55:26
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 20:28:07
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 88.190.141.41 (88-190-141-41.subs.proxad.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 88.190.141.41 (88-190-141-41.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 16:28:02.444794 2026] [security2:error] [pid 21454:tid 21454] [client 88.190.141.41:6465] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thefrontporchoffering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thefrontporchoffering.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as6UUgQ_GsPO_kyeoQ_nWQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
saamkuu
2026-10-12 05:41:21
(2 weeks ago)
DDoS botnet: TCP connection flood, 6 connections to port 443.
DDoS Attack