🇩🇪
Tha_14
2026-07-10 16:14:34
(2 hours ago)
Limit on login attempts is reached
Brute-Force
🇺🇸
TPI-Abuse
2026-07-10 15:44:09
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 102.68.63.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 102.68.63.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 11:44:06.545401 2026] [security2:error] [pid 29102:tid 29102] [client 102.68.63.59:26716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sharonmauldin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharonmauldin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alETRssfgwlV8KSuYC7q6gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-07-10 12:39:22
(6 hours ago)
[FriJul1014:39:18.7347452026][security2:error][pid1284178:tid1284315][client102.68.63.59:0]ModSecuri ...
show more
[FriJul1014:39:18.7347452026][security2:error][pid1284178:tid1284315][client102.68.63.59:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mgpublishing.ch\"][uri\"/xmlrpc.php\"][unique_id\"alDn9gCajFyf-LKd-aJF-AAAARQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
Penny Packer
2026-07-10 10:25:08
(8 hours ago)
Fail2Ban apache-tripwires
Web App Attack
🇳🇱
wlt-blocker
2026-07-10 09:25:22
(9 hours ago)
Unauthorized access to webpage admin
Web App Attack
2026-07-10 06:03:41
(12 hours ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
2026-07-10 03:13:03
(15 hours ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇩🇪
ghostwarriors
2026-07-10 01:51:45
(17 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-07-09 23:26:06
(19 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 1 hits.
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 22:01:20
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 102.68.63.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 102.68.63.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 18:01:14.964652 2026] [security2:error] [pid 4433:tid 4433] [client 102.68.63.59:25163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rwabutazafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rwabutazafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "alAaKpauWvun8uTcLrgf4gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
foxxelabs
2026-07-09 10:27:18
(1 day ago)
Automated report from FoxxeLabs Sentinel. Path probed: /xmlrpc.php | Project: anseo | Reason(s): Kno ...
show more
Automated report from FoxxeLabs Sentinel. Path probed: /xmlrpc.php | Project: anseo | Reason(s): Known exploit path: /xmlrpc.php | User-Agent: Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/90.0.0.0 Safari/537
show less
Web App Attack
🇳🇱
wlt-blocker
2026-07-09 00:20:23
(1 day ago)
Unauthorized access to webpage admin
Web App Attack
🇫🇮
inlink.ltd
2026-07-08 22:57:16
(1 day ago)
Known malicious PHP file or CMS probe
Web App Attack
🇬🇧
consul.to
2026-07-08 19:43:37
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 16:07:23
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 102.68.63.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 102.68.63.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 12:07:14.919857 2026] [security2:error] [pid 22025:tid 22025] [client 102.68.63.59:40492] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||angelaknightmusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "angelaknightmusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ak51sgOAExuvJyOCKarx4AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack