🇺🇸
OceanTreasure
2026-06-03 17:25:11
UTC ·
(5 months ago)
tcp/443; WordPress XML-RPC brute force attempt: "GET //xmlrpc.php?rsd" @ 2026-06-03T17:15:43Z [proxy]
Brute-Force
🇺🇸
TPI-Abuse
2026-06-03 17:23:27
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 136.118.19.14 (14.19.118.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 13:23:19.476461 2026] [security2:error] [pid 15163:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 136.118.19.14 (14.19.118.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 13:23:19.476461 2026] [security2:error] [pid 15163:tid 15184] [client 136.118.19.14:53971] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||supercyprus.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "supercyprus.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiBjB7y86ZDmU-stc1_ZQwAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-03 17:06:29
UTC ·
(5 months ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 16:51:36
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 136.118.19.14 (14.19.118.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:51:30.018042 2026] [security2:error] [pid 12438:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 136.118.19.14 (14.19.118.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:51:30.018042 2026] [security2:error] [pid 12438:tid 12438] [client 136.118.19.14:55868] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.stop902.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.stop902.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiBbkgJ_XHpCTJmxjfeB6AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Vianpyro
2026-06-03 16:51:20
UTC ·
(5 months ago)
Honeypot: 15 request(s) in 0 min. Paths: //wp-includes/ID3/license.txt, //feed/, //xmlrpc.php, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml. Method(s): GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ...
show more
Honeypot: 15 request(s) in 0 min. Paths: //wp-includes/ID3/license.txt, //feed/, //xmlrpc.php, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml. Method(s): GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 396982 (Google LLC).
show less
Web App Attack
Bad Web Bot
Brute-Force
Hacking
2026-06-03 16:46:45
UTC ·
(5 months ago)
(wordpress) Failed wordpress login from 136.118.19.14 (US/United States/14.19.118.136.bc.googleusercontent.com)
Brute-Force
🇩🇪
LRob
2026-06-03 16:45:08
UTC ·
(5 months ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇳🇿
Antinson
2026-06-03 16:42:29
UTC ·
(5 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇩🇪
on-com
2026-06-03 16:41:05
UTC ·
(5 months ago)
URL scan
Brute-Force
Web App Attack
🇨🇭
zynex
2026-06-03 16:38:44
UTC ·
(5 months ago)
URL Probing: /wp1/wp-includes/wlwmanifest.xml
Web App Attack
🇳🇱
Site.eu
2026-06-03 16:38:38
UTC ·
(5 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
Jarda_H
2026-06-03 16:38:29
UTC ·
(5 months ago)
http-probing
Web App Attack
🇩🇪
FeG Deutschland
2026-06-03 16:34:44
UTC ·
(5 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 16:32:09
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 136.118.19.14 (14.19.118.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:32:05.051406 2026] [security2:error] [pid 2683:tid 2 ...
show more
(mod_security) mod_security (id:225170) triggered by 136.118.19.14 (14.19.118.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:32:05.051406 2026] [security2:error] [pid 2683:tid 2683] [client 136.118.19.14:54745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lahamradio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lahamradio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiBXBTslfsUHMa64pw840gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-03 16:30:03
UTC ·
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack