🇫🇷
SpaceHost-Server
2026-07-14 22:26:15
(43 minutes ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 17:17:28
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 138.197.164.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 138.197.164.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 13:17:23.374158 2026] [security2:error] [pid 18086:tid 18086] [client 138.197.164.4:60952] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.constructionloansfunding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.constructionloansfunding.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alZvI7WvBVjpoyMvv7xghAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
findlab
2026-07-14 16:25:01
(6 hours ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇩🇪
wlt-blocker
2026-07-14 16:23:13
(6 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
bescared
2026-07-14 16:22:39
(6 hours ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-07-14 16:02:10
(7 hours ago)
Bad_requests
Bad Web Bot
🇬🇧
AvonleaConsulting
2026-07-14 15:56:33
(7 hours ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇵🇫
www.gregorymariani.com
2026-07-14 15:52:11
(7 hours ago)
138.197.164.4 - - [14/Jul/2026:15:52:09 +0000] "GET / HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT ...
show more
138.197.164.4 - - [14/Jul/2026:15:52:09 +0000] "GET / HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 592 0.000 [default-comfy-mars-service-80] [] - - - - 64f4a01a0aba060fc5bcf508fb4066dd
138.197.164.4 - - [14/Jul/2026:15:52:10 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 620 0.000 [default-comfy-mars-service-80] [] - - - - 300afd944495d45d8409faf4608f5b72
138.197.164.4 - - [14/Jul/2026:15:52:10 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 607 0.000 [default-comfy-mars-service-80] [] - - - - e789d6d7024a78326a6dbcc024d725b4
...
show less
Brute-Force
🇫🇷
Tilellit.PRO
2026-07-14 15:47:43
(7 hours ago)
Web application probing for unlinked paths and hidden files
Web App Attack
Hacking
2026-07-14 15:41:49
(7 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇮🇹
mediarama.com
2026-07-14 15:40:59
(7 hours ago)
Banned by Fail2Ban
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-07-14 15:15:28
(7 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇳🇴
tmiland
2026-07-14 14:42:45
(8 hours ago)
(wordpress_wlwmanifest) WordPress wlwmanifest.xml Attack 138.197.164.4 (CA/Canada/-): 3 in the last ...
show more
(wordpress_wlwmanifest) WordPress wlwmanifest.xml Attack 138.197.164.4 (CA/Canada/-): 3 in the last 3600 secs; IP: 138.197.164.4; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 138.197.164.4 - - [14/Jul/2026:16:42:41 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.197.164.4 - - [14/Jul/2026:16:42:41 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 3232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.197.164.4 - - [14/Jul/2026:16:42:41 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 3232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
show less
Brute-Force
🇫🇷
masterguru
2026-07-14 14:41:45
(8 hours ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-195)
Hacking
🇩🇪
macrob
2026-07-14 14:39:30
(8 hours ago)
2026/07/14 14:39:28 [error] 3428138#3428138: *375892524 access forbidden by rule, client: 138.197.16 ...
show more
2026/07/14 14:39:28 [error] 3428138#3428138: *375892524 access forbidden by rule, client: 138.197.164.4, server: ca5h.win, request: "GET //wp-includes/wlwmanifest.xml HTTP/1.1", host: "ca5h.win"
2026/07/14 14:39:28 [error] 3428138#3428138: *375892529 access forbidden by rule, client: 138.197.164.4, server: ca5h.win, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "ca5h.win"
2026/07/14 14:39:28 [error] 3428138#3428138: *375892535 access forbidden by rule, client: 138.197.164.4, server: ca5h.win, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "ca5h.win"
...
show less
Web App Attack