🇩🇪
neckaralb-admin.de
2026-11-14 18:55:50
UTC ·
(6 minutes ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 18:00:09
UTC ·
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 13:00:04.146530 2026] [security2:error] [pid 25308:tid 25308] [client 104.248.152.90:51957] ...
show more
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 13:00:04.146530 2026] [security2:error] [pid 25308:tid 25308] [client 104.248.152.90:51957] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.renjunews.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.renjunews.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avihpLiT13Q9UAxXoA3SgAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-11-14 17:58:50
UTC ·
(1 hour ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
2026-11-14 17:43:32
UTC ·
(1 hour ago)
WEB attack
Brute-Force
🇩🇪
ghostwarriors
2026-11-14 16:20:08
UTC ·
(2 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-11-14 16:07:12
UTC ·
(2 hours ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-14 15:55:00
UTC ·
(3 hours ago)
WordPress login brute force (wp-login/xmlrpc login attempts)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 15:46:55
UTC ·
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:46:49.968414 2026] [security2:error] [pid 15728:tid 15728] [client 104.248.152.90:49186] ...
show more
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:46:49.968414 2026] [security2:error] [pid 15728:tid 15728] [client 104.248.152.90:49186] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.247.fishing|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.247.fishing"] [uri "/wp-json/wp/v2/users"] [unique_id "aviCaYMfwknjDI8iSOGtWgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-14 15:13:03
UTC ·
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 15:04:37
UTC ·
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:04:32.035172 2026] [security2:error] [pid 23852:tid 23852] [client 104.248.152.90:62017] ...
show more
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:04:32.035172 2026] [security2:error] [pid 23852:tid 23852] [client 104.248.152.90:62017] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talentstar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avh4gBGgJgogk2T6EGQcdAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-14 14:23:13
UTC ·
(4 hours ago)
1.546 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-14 14:04:09
UTC ·
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:04:02.067871 2026] [security2:error] [pid 21876:tid 21876] [client 104.248.152.90:56962] ...
show more
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:04:02.067871 2026] [security2:error] [pid 21876:tid 21876] [client 104.248.152.90:56962] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.method1.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.method1.net"] [uri "/wp-json/wp/v2/users"] [unique_id "avhqUiycvalW5kGxXAm8ZQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 13:05:33
UTC ·
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:05:27.360711 2026] [security2:error] [pid 30274:tid 30274] [client 104.248.152.90:60193] ...
show more
(mod_security) mod_security (id:225170) triggered by 104.248.152.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:05:27.360711 2026] [security2:error] [pid 30274:tid 30274] [client 104.248.152.90:60193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.caralis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.caralis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avhcl7EcppQUdC3HgpxCCwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-28 10:44:34
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
