🇧🇷
Host One
2026-10-17 05:30:26
(13 hours ago)
Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting s ...
show more
Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Automated report.
show less
Brute-Force
Web App Attack
🇪🇸
librebit
2026-10-17 04:24:52
(14 hours ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-10-16 23:00:27
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.149.29.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 103.149.29.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 19:00:14.508064 2026] [security2:error] [pid 25717:tid 25717] [client 103.149.29.80:53720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jennyfiore.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jennyfiore.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atKsfvWMhroJ2WwTTV5uaAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyt
2026-10-16 22:31:52
(20 hours ago)
Brute-Force, Web App Attack, suspicious: WP login POST blocked by WAF
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-16 22:14:14
(20 hours ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 21:41:23
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.149.29.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 103.149.29.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 17:41:09.735273 2026] [security2:error] [pid 5131:tid 5131] [client 103.149.29.80:36610] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fattoria-rendena.it|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fattoria-rendena.it"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atKZ9UY2g2I3lMkYdX_DkgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mawan
2026-10-16 21:39:09
(21 hours ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-16 21:20:49
(21 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇲🇾
Rizzy
2026-10-16 21:19:48
(21 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 21:11:15
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.149.29.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 103.149.29.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 17:11:02.822068 2026] [security2:error] [pid 12911:tid 12911] [client 103.149.29.80:54878] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||superlamb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "superlamb.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atKS5gA19bHVAiIJPzqujwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
bittiguru.fi
2026-10-16 20:45:07
(22 hours ago)
103.149.29.80 - [16/Oct/2026:23:45:04 +0300] "POST /xmlrpc.php HTTP/2.0" 503 18039 "-" "Mozilla/5.0 ...
show more
103.149.29.80 - [16/Oct/2026:23:45:04 +0300] "POST /xmlrpc.php HTTP/2.0" 503 18039 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "-"
103.149.29.80 - [16/Oct/2026:23:45:06 +0300] "POST /xmlrpc.php HTTP/2.0" 503 18039 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "-"
...
show less
Hacking
Brute-Force
Web App Attack
🇳🇿
Tripwire
2026-10-16 20:08:31
(22 hours ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇷🇴
iulianh
2026-10-16 19:50:00
(23 hours ago)
80,443
Brute-Force
SSH
🇺🇸
lostswordfish.com
2026-10-16 14:54:04
(1 day ago)
Wordfence waf block on registrymatters
Web App Attack
🇸🇪
vaia.cloud
2026-10-16 14:30:02
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack