2026-07-23 20:00:31
(1 day ago)
Failed Wordpress Logins
Web App Attack
🇧🇪
voormedia
2026-07-22 02:20:25
(2 days ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 02:10:31
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 146.190.103.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 146.190.103.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 22:10:25.837195 2026] [security2:error] [pid 3753578:tid 3753578] [client 146.190.103.57:62499] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wordpress.ianmagarzo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wordpress.ianmagarzo.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amAmkdD7t5z910k-XiCrUgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Klaverstyn
2026-07-22 00:59:14
(2 days ago)
Excessive HTTP request rate
Web App Attack
2026-07-22 00:35:34
(2 days ago)
Failed Wordpress Logins
Web App Attack
🇩🇪
big-cloud.nl
2026-07-22 00:32:48
(2 days ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇩🇪
konseptit
2026-07-22 00:25:01
(2 days ago)
(wordpress) Failed wordpress login from 146.190.103.57 (SG/Singapore/-)
Brute-Force
🇧🇪
madeit
2026-07-22 00:04:57
(2 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 22:33:09
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 146.190.103.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 146.190.103.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 18:33:06.075761 2026] [security2:error] [pid 755165:tid 755165] [client 146.190.103.57:52438] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||whiterapperz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whiterapperz.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "al_zorLTOKaKQL9Rqh4P4AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-07-21 22:17:42
(2 days ago)
[WedJul2200:17:37.4789012026][security2:error][pid3848008:tid3848209][client146.190.103.57:0]ModSecu ...
show more
[WedJul2200:17:37.4789012026][security2:error][pid3848008:tid3848209][client146.190.103.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"whatsdecor.ch\"][uri\"/xmlrpc.php\"][unique_id\"al_wAXZ6XW8CJIHXo2OU7gAAAMQ\"]
show less
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-07-21 22:00:05
(2 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
2026-07-21 20:08:46
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 18:26:23
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 146.190.103.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 146.190.103.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 14:26:15.145184 2026] [security2:error] [pid 6206:tid 6206] [client 146.190.103.57:61289] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||waf-test.nilestree.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "waf-test.nilestree.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "al-5x0AuhsfNjbcNryYScQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-07-21 16:56:04
(3 days ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
masterguru
2026-07-21 15:59:39
(3 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-169)
Hacking