🇫🇷
tecnoacquisti.com
2026-06-05 08:38:34
(3 days ago)
PrestaShop Security Module: Calls WordPress paths probing known vulnerabilities
Web App Attack
🇫🇷
applemooz
2026-06-05 06:08:07
(3 days ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
🇩🇪
ger-stg-sifi1
2026-06-02 03:43:14
(6 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 07:25:29
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.78.208.67 (ip-103-78-208-63.moratelindo.net ...
show more
(mod_security) mod_security (id:225170) triggered by 103.78.208.67 (ip-103-78-208-63.moratelindo.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 03:25:21.509430 2026] [security2:error] [pid 20000:tid 20000] [client 103.78.208.67:56420] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fltsiminc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fltsiminc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahk_YVK4j27OaLvHebScAQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-29 03:00:14
(1 week ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇳🇱
wlt-blocker
2026-05-26 06:49:17
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
🇬🇧
consul.to
2026-05-26 04:15:21
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 02:42:49
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.78.208.67 (ip-103-78-208-63.moratelindo.net ...
show more
(mod_security) mod_security (id:225170) triggered by 103.78.208.67 (ip-103-78-208-63.moratelindo.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 22:42:44.296682 2026] [security2:error] [pid 14125:tid 14125] [client 103.78.208.67:49785] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||doublenaughtspycar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "doublenaughtspycar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahUIpG139A4zoKabv4l54wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-05-25 01:42:14
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
ID/Indonesia/ip-103-78-208-63.moratelindo.net.id
Web App Attack
🇳🇱
BlueWire Hosting
2026-05-22 06:09:15
(2 weeks ago)
Probing websites for vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 04:33:28
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 103.78.208.67 (ip-103-78-208-63.moratelindo.net ...
show more
(mod_security) mod_security (id:225170) triggered by 103.78.208.67 (ip-103-78-208-63.moratelindo.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 00:33:23.033763 2026] [security2:error] [pid 21302:tid 21302] [client 103.78.208.67:61509] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mkdesignndetailing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mkdesignndetailing.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag_ckxn8R8vAmhNczJngvgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-05-20 05:43:52
(2 weeks ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)
Web App Attack
🇩🇪
outputblog.de
2026-05-20 04:19:39
(2 weeks ago)
apache-wp-probephp
Port Scan
Hacking
Brute-Force
🇬🇧
NotCool
2026-05-19 07:12:52
(2 weeks ago)
[7200] (XMLRPC,ABUSIVEBOT) Login failure/trigger from 103.78.208.67 (ID/Indonesia/ip-103-78-208-63.m ...
show more
[7200] (XMLRPC,ABUSIVEBOT) Login failure/trigger from 103.78.208.67 (ID/Indonesia/ip-103-78-208-63.moratelindo.net.id): 50 in the last 3600 secs
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-05-19 05:14:33
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 103.78.208.67 (ip-103-78-208-63.moratelindo.net ...
show more
(mod_security) mod_security (id:225170) triggered by 103.78.208.67 (ip-103-78-208-63.moratelindo.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 01:14:29.399841 2026] [security2:error] [pid 27590:tid 27590] [client 103.78.208.67:63722] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grabagame.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grabagame.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agvxtQXAxkkGnFxXVfXeXAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack