🇩🇪
Holger
2026-07-14 06:10:58
(2 days ago)
WordPress WebAttack
Brute-Force
Web App Attack
2026-07-14 05:07:49
(2 days ago)
Fail2Ban WordPress login brute-force detected
Brute-Force
Web App Attack
🇩🇪
findlab
2026-07-13 04:00:01
(3 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-07-12 07:19:51
(4 days ago)
[SunJul1209:19:48.0661242026][security2:error][pid3563092:tid3563200][client146.196.45.214:0]ModSecu ...
show more
[SunJul1209:19:48.0661242026][security2:error][pid3563092:tid3563200][client146.196.45.214:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"laketec.ch\"][uri\"/xmlrpc.php\"][unique_id\"alNAFBq0-gfbSCgm0hu7lwAAAQs\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-12 06:41:19
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 146.196.45.214 (214-45.196.146.static.gtplkcbpl ...
show more
(mod_security) mod_security (id:225170) triggered by 146.196.45.214 (214-45.196.146.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 02:41:11.248816 2026] [security2:error] [pid 23363:tid 23391] [client 146.196.45.214:16038] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kettlehill.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kettlehill.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alM3B--uvb_Ieuu5_xGh7gAAANU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Holger
2026-07-10 18:25:00
(6 days ago)
WordPress WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 16:16:12
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 146.196.45.214 (214-45.196.146.static.gtplkcbpl ...
show more
(mod_security) mod_security (id:225170) triggered by 146.196.45.214 (214-45.196.146.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 12:16:06.577077 2026] [security2:error] [pid 3639:tid 3639] [client 146.196.45.214:16409] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kaylamaclaincounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ak_JRg_IK1ZpVz9pvrhPFwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 04:25:31
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 146.196.45.214 (214-45.196.146.static.gtplkcbpl ...
show more
(mod_security) mod_security (id:225170) triggered by 146.196.45.214 (214-45.196.146.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 00:25:25.862042 2026] [security2:error] [pid 18690:tid 18690] [client 146.196.45.214:17157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||peacecampus.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peacecampus.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ak8itQF4QffX6RGfd4uEKwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Holger
2026-07-08 06:38:32
(1 week ago)
WordPress WebAttack
Brute-Force
Web App Attack
🇬🇧
D3monite
2023-01-02 22:54:07
(3 years ago)
Attempted Brute Force (dovecot)
Brute-Force