🇺🇸
cwytech
2026-06-23 17:20:10
(2 days ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-xmlrpc-bf-high.
Bad Web Bot
Web App Attack
🇺🇸
factor1
2026-06-23 17:00:43
(2 days ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
🇺🇸
bigwavedave
2026-06-23 16:07:59
(2 days ago)
Wordpress Attack
Web App Attack
🇧🇾
lns.bz
2026-06-23 15:23:15
(2 days ago)
Banned for trying to access xmlrpc [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 14:18:51
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 105.127.10.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 105.127.10.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 10:18:46.234232 2026] [security2:error] [pid 9454:tid 9454] [client 105.127.10.241:3641] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gellertdealers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gellertdealers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajqVxgvxoq_iv-_B8aiFaQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-23 14:09:42
(2 days ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
4server
2026-06-23 13:07:51
(2 days ago)
[TueJun2315:07:46.0482652026][security2:error][pid3016845:tid3016919][client105.127.10.241:0]ModSecu ...
show more
[TueJun2315:07:46.0482652026][security2:error][pid3016845:tid3016919][client105.127.10.241:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"esengineering.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajqFIjTKYKQfcnabokIFzwAAAEA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇧🇪
taivas.nl
2026-06-23 11:02:11
(2 days ago)
Wordpress_xmlrpc_attack
Bad Web Bot
🇫🇷
dynamix
2026-06-23 10:46:57
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 10:13:21
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 105.127.10.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 105.127.10.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 06:13:17.376513 2026] [security2:error] [pid 26696:tid 26696] [client 105.127.10.241:4525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artbytracyjane.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artbytracyjane.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpcPaPUDXfzCsO2_QuG2wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 09:02:49
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 105.127.10.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 105.127.10.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 05:02:44.352768 2026] [security2:error] [pid 29540:tid 29540] [client 105.127.10.241:5215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||3beeze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "3beeze.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpLtKsH34PV8yjagq3_xAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-04-17 20:45:02
(2 months ago)
(wordpress) Failed wordpress login from 105.127.10.241 (NG/Nigeria/-): (CF_ENABLE)
Brute-Force