🇨🇿
ptlab
2026-06-28 04:45:13
(4 days ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇫🇷
tecnicorioja
2026-06-27 22:00:44
(4 days ago)
wp-login attack [27/Jun/2026:18:24:39
Brute-Force
Web App Attack
🇩🇪
Ba-Yu
2026-06-27 21:33:19
(4 days ago)
WordPress bruteforce
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 17:52:56
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 141.164.41.163 (141.164.41.163.vultrusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.41.163 (141.164.41.163.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 13:52:49.183895 2026] [security2:error] [pid 8586:tid 8586] [client 141.164.41.163:56152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theaccents.mainstreetofficesuites.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theaccents.mainstreetofficesuites.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akAN8QhbJOgMaZAfjTvA6AAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 13:26:55
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 141.164.41.163 (141.164.41.163.vultrusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.41.163 (141.164.41.163.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 09:26:49.837406 2026] [security2:error] [pid 11492:tid 11516] [client 141.164.41.163:40266] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||travelusa.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "travelusa.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj_PmeDR7mVkAPYVcw3TogAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-06-27 12:45:46
(5 days ago)
CMS (WordPress or Joomla) login attempt.
141.164.41.163 - - [27/Jun/2026:14:45:44 +0200] "POST /wp-l ...
show more
CMS (WordPress or Joomla) login attempt.
141.164.41.163 - - [27/Jun/2026:14:45:44 +0200] "POST /wp-login.php HTTP/2.0" 200 3203 "https://*REDACTED*.*REDACTED*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
show less
Hacking
Brute-Force
Web App Attack
🇫🇷
solution.it
2026-06-27 07:41:06
(5 days ago)
[Sat Jun 27 09:41:06.502222 2026] [php7:error] [pid 3187905:tid 3187905] [client 141.164.41.163:3850 ...
show more
[Sat Jun 27 09:41:06.502222 2026] [php7:error] [pid 3187905:tid 3187905] [client 141.164.41.163:38502] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 04:42:43
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 141.164.41.163 (141.164.41.163.vultrusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.41.163 (141.164.41.163.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 00:42:38.558334 2026] [security2:error] [pid 26726:tid 26726] [client 141.164.41.163:48738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soundtrax.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj9UvtuSnCV2uLALF2hy3QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-06-27 04:24:59
(5 days ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇩🇪
Hazzard
2026-06-26 21:30:49
(5 days ago)
(wordpress) Failed wordpress login from 141.164.41.163 (KR/South Korea/Seoul/Seoul/141.164.41.163.vu ...
show more
(wordpress) Failed wordpress login from 141.164.41.163 (KR/South Korea/Seoul/Seoul/141.164.41.163.vultrusercontent.com/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇺🇸
lostswordfish.com
2026-06-26 18:52:04
(6 days ago)
Wordfence waf block on baystatereentrynetwork
Web App Attack