🇫🇷
vincent_EUDIER
2026-06-18 19:00:00
(2 hours ago)
SURICATA HTTP unable to match response to request
Hacking
🇬🇧
consul.to
2026-06-18 17:42:28
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
noise.agency
2026-06-18 14:04:04
(7 hours ago)
(wordpress) Failed wordpress login from 130.195.240.12 (MD/Moldova/-)
Brute-Force
🇫🇷
dynamix
2026-06-18 13:02:47
(8 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 10:51:59
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 130.195.240.12 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.195.240.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 06:51:55.005541 2026] [security2:error] [pid 27382:tid 27382] [client 130.195.240.12:59137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.modalguitarist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.modalguitarist.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajPNy8V8JCNZ5U6HHkrGFgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 09:54:59
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 130.195.240.12 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.195.240.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 05:54:53.761622 2026] [security2:error] [pid 2216:tid 2216] [client 130.195.240.12:62815] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mobileonlinecasinos.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mobileonlinecasinos.co"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajPAbQwfnywd1iSLFF6WZgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bigwavedave
2026-06-18 09:54:03
(12 hours ago)
Wordpress Attack
Web App Attack
🇺🇸
WeekendWeb
2026-06-18 08:48:19
(13 hours ago)
Wordpress Vunerability attack
Web App Attack
2026-06-18 08:19:05
(13 hours ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /wp-json/wp/v2/users/ HTTP/1. ...
show more
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /wp-json/wp/v2/users/ HTTP/1.1, GET /wp-includes/ID3/license.txt HTTP/1.1
show less
Hacking
Web App Attack
🇮🇱
Dolphi
2026-06-18 07:00:04
(14 hours ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 06:48:47
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 130.195.240.12 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.195.240.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 02:48:40.264321 2026] [security2:error] [pid 11272:tid 11272] [client 130.195.240.12:10821] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mkdesignndetailing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mkdesignndetailing.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajOUyIbjkhr_vAxBDmrvcQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-06-18 05:14:37
(16 hours ago)
13 attacks on PHP URLs, Wordpress URLs:
GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1
GET ...
show more
13 attacks on PHP URLs, Wordpress URLs:
GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1
GET /wp-includes/id3/license.txt/cms/wp-includes/wlwmanifest.xml HTTP/1.1
show less
Web App Attack
2026-06-18 04:49:10
(17 hours ago)
Attac
Brute-Force
🇲🇽
octageeks.com
2026-06-18 04:18:18
(17 hours ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
2026-06-18 03:10:03
(18 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot