๐ซ๐ท
masterguru
2026-08-28 07:04:25
(1 month ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
๐ง๐ช
cmbplf
2026-08-10 15:36:54
(2 months ago)
1.138 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
๐ฒ๐พ
Rizzy
2026-08-08 20:54:39
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-07-30 21:45:31
(2 months ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-13 15:25:34
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 11:25:26.547208 2026] [security2:error] [pid 32588:tid 32588] [client 103.117.149.162:51153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||boat-registration-greece.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boat-registration-greece.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alUDZpmssCn4rPEqzyf60QAAAAA"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-13 09:47:43
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 05:47:34.555919 2026] [security2:error] [pid 23800:tid 23800] [client 103.117.149.162:64463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boaredraven.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alS0No8OxKTGMI85OS8ZjAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-07-13 03:42:45
(3 months ago)
(wordpress) Apache: Failed WordPress login from 103.117.149.162 (TH/Thailand/-): 10 in the last 3600 ...
show more
(wordpress) Apache: Failed WordPress login from 103.117.149.162 (TH/Thailand/-): 10 in the last 3600 secs (0-196)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-11 10:58:38
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 06:58:31.097769 2026] [security2:error] [pid 15308:tid 15308] [client 103.117.149.162:53284] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iconconstructors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iconconstructors.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alIh1-8qy4I3lUrPof7FpgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-11 08:24:56
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 04:24:50.425643 2026] [security2:error] [pid 12718:tid 12718] [client 103.117.149.162:58381] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iconbizpromo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iconbizpromo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alH90lQLWWZavHvt0Da2TgAAAA4"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-07-05 14:30:04
(3 months ago)
trying wp-login.php/xmlrpc.php 66 times in 1 minutes
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-07-05 09:43:31
(3 months ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2026-06-21 22:05:13
(4 months ago)
Login Too Frequent (7)
Brute-Force
Web App Attack
Anonymous
2026-06-05 06:40:05
(4 months ago)
| [Dangerous/Bangladesh] Aggressive IP 103.117.149.162 (~30 hits). Type: DoS Defender- Web server 40 ...
show more
| [Dangerous/Bangladesh] Aggressive IP 103.117.149.162 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-06-03 18:36:42
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 103.117.149.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:36:36.647928 2026] [security2:error] [pid 2117:tid 2117] [client 103.117.149.162:63115] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oruhu.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oruhu.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiB0NF5w9FPC0uruVWLLlgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
DocNetzwerk
2026-06-03 15:26:41
(4 months ago)
(php-url-fopen) Failed php-url-fopen trigger from 103.117.149.162 (TH/Thailand/-)
Web App Attack