🇩🇪
FeG Deutschland
2026-07-24 00:15:25
(15 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-22 23:11:16
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
2026-07-22 10:45:46
(2 days ago)
Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.
Web App Attack
🇩🇪
brechtr
2026-07-22 09:54:39
(2 days ago)
[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login. ...
show more
[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login.php
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-22 01:27:36
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 145.239.144.82 (server.gdt.com.np): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 145.239.144.82 (server.gdt.com.np): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 21:27:28.515647 2026] [security2:error] [pid 118136:tid 118136] [client 145.239.144.82:47344] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||makaihe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "makaihe.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amAcgNDcd44JR0CTG41QnwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 00:15:10
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 145.239.144.82 (server.gdt.com.np): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 145.239.144.82 (server.gdt.com.np): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 20:15:04.600241 2026] [security2:error] [pid 10871:tid 10871] [client 145.239.144.82:58030] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||auto.fletcherdouglas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "auto.fletcherdouglas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amALiDWFQeQkUCthPJiDtgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 19:56:37
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 145.239.144.82 (server.gdt.com.np): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 145.239.144.82 (server.gdt.com.np): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 15:56:30.772328 2026] [security2:error] [pid 30268:tid 30268] [client 145.239.144.82:37038] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vintageamptubes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vintageamptubes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al_O7hBL0NPhrYnzrjIvBgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-07-21 17:04:47
(2 days ago)
WP Author Enumeration, WP User Enumeration
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 17:03:45
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 145.239.144.82 (server.gdt.com.np): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 145.239.144.82 (server.gdt.com.np): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 13:03:41.480965 2026] [security2:error] [pid 13720:tid 13720] [client 145.239.144.82:49558] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mchen-arch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mchen-arch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al-mbSpTzatDxdwUGHabKAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-21 15:08:25
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇨🇿
ptlab
2026-07-21 12:45:20
(3 days ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
2026-07-20 16:06:14
(3 days ago)
Brute forcing Wordpress login
Hacking
Web App Attack
🇩🇪
Hazzard
2026-07-20 10:59:31
(4 days ago)
(wordpress) Failed wordpress login from 145.239.144.82 (FR/France/-/-/server.gdt.com.np/[redacted]): ...
show more
(wordpress) Failed wordpress login from 145.239.144.82 (FR/France/-/-/server.gdt.com.np/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇩🇪
london2038.com
2026-07-19 15:33:23
(4 days ago)
Attacking WordPress
145.239.144.82 - - [19/Jul/2026:17:33:17 +0200] "POST /xmlrpc.php HTTP/2.0" 503 ...
show more
Attacking WordPress
145.239.144.82 - - [19/Jul/2026:17:33:17 +0200] "POST /xmlrpc.php HTTP/2.0" 503 18947 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/147.0.7871.34 Mobile/15E148 Safari/604.1"
show less
Brute-Force
Web App Attack