2026-05-26 12:00:42
(3 weeks ago)
RdpGuard detected brute-force attempt on FTP
Brute-Force
2026-05-12 21:03:14
(1 month ago)
"GET /wp-includes/ID3/license.txt HTTP/1.1"
Hacking
Web App Attack
🇳🇱
Savvii
2026-05-11 21:44:56
(1 month ago)
10 attempts against mh_ha-misc-ban on ethyl
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-05-11 11:17:34
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 102.129.152.50 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 102.129.152.50 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇧🇷
Halux
2026-05-10 22:39:25
(1 month ago)
102.129.152.50 Web Application Firewall multiple violations
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 18:04:20
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 102.129.152.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.152.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 14:04:15.899792 2026] [security2:error] [pid 9608:tid 9608] [client 102.129.152.50:38099] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.goodacoustic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.goodacoustic.com"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "agDIn-cNRfr0Oz4CIE9YtQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-05-10 12:08:20
(1 month ago)
10 attempts against mh-misc-ban on draco
Web App Attack
🇺🇸
octageeks.com
2026-05-10 04:06:36
(1 month ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇦🇺
screwlooseit.com.au
2026-05-10 03:20:24
(1 month ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 02:51:37
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 102.129.152.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.152.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 22:51:31.468112 2026] [security2:error] [pid 11140:tid 11163] [client 102.129.152.50:3770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nicholsinvest.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nicholsinvest.com"] [uri "/wp-includes/id3/license.txt/blog/wp-json/wp/v2/users/"] [unique_id "af_ys6hwtbqGUV21NIbUmQAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇱
Dolphi
2026-05-09 21:20:02
(1 month ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 09:55:42
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 102.129.152.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.152.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 05:55:34.883874 2026] [security2:error] [pid 13789:tid 13789] [client 102.129.152.50:31246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kairoslogammakmur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "af8ElnxrO-Z6A2Z-uoc1bgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-05-09 07:02:52
(1 month ago)
18.940 requests in 1 hour (4d3h59m)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-09 03:43:30
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 102.129.152.50 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 102.129.152.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 23:43:24.369235 2026] [security2:error] [pid 24403:tid 24403] [client 102.129.152.50:16407] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.budgetbyron.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.budgetbyron.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "af6tXNxvKbzwZTXOPX72jgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-05-09 03:10:39
(1 month ago)
Web App Attack