🇧🇪
voormedia
2025-11-27 06:13:09
(10 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇩🇪
kjaerulff
2025-11-17 12:43:05
(11 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇩🇪
Bedios GmbH
2025-11-14 23:10:20
(11 months ago)
Wordpress hacking attempt
Web App Attack
🇨🇭
backslash
2025-11-12 17:10:03
(11 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇧🇪
holos.pt
2025-04-17 05:00:08
(1 year ago)
Blocked for Readme.txt and debug.log scans in query string: /wp-content/plugins/suretriggers/readme. ...
show more
Blocked for Readme.txt and debug.log scans in query string: /wp-content/plugins/suretriggers/readme.txt
show less
Web App Attack
🇺🇸
mnsf
2025-04-17 01:05:18
(1 year ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇩🇪
on-com
2025-04-17 00:29:06
(1 year ago)
URL scan
Brute-Force
Web App Attack
🇩🇪
bsoft.de
2025-04-16 12:09:46
(1 year ago)
109.248.49.23 - - [16/Apr/2025:14:09:46 +0200] "GET /wp-content/plugins/suretriggers/readme.txt HTTP ...
show more
109.248.49.23 - - [16/Apr/2025:14:09:46 +0200] "GET /wp-content/plugins/suretriggers/readme.txt HTTP/1.1" 301 271 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-08 08:42:38
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 109.248.49.23 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 109.248.49.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 04:42:35.092292 2025] [security2:error] [pid 29036:tid 29140] [client 109.248.49.23:38593] [client 109.248.49.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||trulyoriginalpurpleoctopus.art|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "trulyoriginalpurpleoctopus.art"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_ThewgJ9VVDcb4kbZ5njgAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-08 05:53:00
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 109.248.49.23 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 109.248.49.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 01:52:54.119662 2025] [security2:error] [pid 13537:tid 13537] [client 109.248.49.23:53413] [client 109.248.49.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||schmitzcomm.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "schmitzcomm.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_S5tumzzveqWPT5194UywAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-07 18:14:28
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 109.248.49.23 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 109.248.49.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 14:14:22.931307 2025] [security2:error] [pid 4400:tid 4400] [client 109.248.49.23:37269] [client 109.248.49.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dalessalesandservice.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dalessalesandservice.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_QV_mZi-pAeHp-QVgqT_AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-07 14:12:12
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 109.248.49.23 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 109.248.49.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 10:12:09.065273 2025] [security2:error] [pid 1070316:tid 1070316] [client 109.248.49.23:40759] [client 109.248.49.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||adlc18.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adlc18.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_PdOXK2T_0MikD735cQMwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
syokadmin
2025-04-06 13:22:35
(1 year ago)
(imapd) Failed IMAP login from 109.248.49.23 (RU/Russia/-): 3 in the last 3600 secs
Brute-Force
🇺🇸
mnsf
2025-04-05 02:07:13
(1 year ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2025-04-04 12:01:02
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack