2026-08-28 07:22:47
(6 minutes ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
Hazzard
2026-08-28 06:39:11
(50 minutes ago)
(wordpress) Failed wordpress login from 104.243.44.204 (US/United States/New Jersey/Piscataway/s5-us ...
show more
(wordpress) Failed wordpress login from 104.243.44.204 (US/United States/New Jersey/Piscataway/s5-us.whiteservers.net/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇩🇪
ger-stg-sifi1
2026-08-27 09:03:55
(22 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
neckaralb-admin.de
2026-08-27 07:45:12
(23 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 13:28:57
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 104.243.44.204 (s5-us.whiteservers.net): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 104.243.44.204 (s5-us.whiteservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 09:28:52.078954 2026] [security2:error] [pid 31586:tid 31586] [client 104.243.44.204:56108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotelausland.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotelausland.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ao7qFCjzP3SFfSkjTz5sPQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-08-26 10:40:56
(1 day ago)
Honeypot triggered: /wp-json/wc/v2/customers on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 1 ...
show more
Honeypot triggered: /wp-json/wc/v2/customers on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36. Method: GET
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 05:52:26
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 104.243.44.204 (s5-us.whiteservers.net): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 104.243.44.204 (s5-us.whiteservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 01:52:22.284087 2026] [security2:error] [pid 29602:tid 29602] [client 104.243.44.204:41770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abilityengraving.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abilityengraving.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao5_Fk0d7Fp5DYOKv2pAhQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-08-26 04:04:05
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
LRob
2026-08-24 04:19:33
(4 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users | 2026-08-24 04:19 UTC
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-08-24 01:05:21
(4 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users | 2026-08-24 01:05 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-20 14:25:16
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 104.243.44.204 (s5-us.whiteservers.net): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 104.243.44.204 (s5-us.whiteservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 10:25:09.942541 2026] [security2:error] [pid 19572:tid 19572] [client 104.243.44.204:58200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eileensharaga.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eileensharaga.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aocORfw0Qinmj4eoOjUBNAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-08-19 11:30:17
(1 week ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
FeG Deutschland
2026-08-18 16:58:05
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
neckaralb-admin.de
2026-08-18 16:48:39
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 02:47:57
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 104.243.44.204 (s5-us.whiteservers.net): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 104.243.44.204 (s5-us.whiteservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 22:47:52.208176 2026] [security2:error] [pid 28580:tid 28605] [client 104.243.44.204:57848] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||testproperty.pref-realestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "testproperty.pref-realestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoPH2Ij3haIM0xaEXIjgmAAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack