🇲🇽
octageeks.com
2026-08-31 04:09:00
(1 hour ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-08-31 00:10:37
(5 hours ago)
WordPress Brute Force
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 13:09:38
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 118.99.73.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 118.99.73.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 09:09:32.148625 2026] [security2:error] [pid 3816:tid 3816] [client 118.99.73.30:28091] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frogdesignmexico.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frogdesignmexico.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apQrjLTyhpTFC6zG7sTVBAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-30 13:06:29
(16 hours ago)
Brute forcing Wordpress login
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-30 13:01:32
(16 hours ago)
[30/Aug/2026:16:01:32 +0300] -- 118.99.73.30 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-js ...
show more
[30/Aug/2026:16:01:32 +0300] -- 118.99.73.30 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-json/wp/v2/comments?per_page=100&_fields=author_name,author_url HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-08-30 12:49:11
(16 hours ago)
(wordpress) Failed wordpress login from 118.99.73.30 (ID/Indonesia/-): (CF_ENABLE)
Brute-Force
2026-08-30 12:45:03
(17 hours ago)
Bot / scanning and/or hacking attempts: [2/2] done, GET /wp-login.php HTTP/2.0, POST /wp-login.php H ...
show more
Bot / scanning and/or hacking attempts: [2/2] done, GET /wp-login.php HTTP/2.0, POST /wp-login.php HTTP/2.0
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 12:42:30
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 118.99.73.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 118.99.73.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 08:42:25.287946 2026] [security2:error] [pid 30315:tid 30315] [client 118.99.73.30:37151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geriterry.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geriterry.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apQlMT-TVVe_QR0Q_0YvHwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-30 12:05:24
(17 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
LRob
2026-08-30 12:01:40
(17 hours ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users/me | 2026-08-30 12:01 UTC
show less
Hacking
Web App Attack
🇩🇪
expandmade.com
2026-08-30 11:43:08
(18 hours ago)
trolling for wp-login [30/Aug/2026:11:43:08 "GET /wp-login.php"]
Web App Attack
🇩🇪
neckaralb-admin.de
2026-08-30 09:51:39
(19 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇿
Tripwire
2026-08-30 09:37:04
(20 hours ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 09:10:40
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 118.99.73.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 118.99.73.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 05:10:34.579260 2026] [security2:error] [pid 12853:tid 12853] [client 118.99.73.30:31795] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tomartsmedia.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tomartsmedia.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apPzit_Daezn-IrzVjmsZQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-08-30 07:46:32
(21 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack