🇨🇭
backslash
2026-01-27 15:15:39
UTC ·
(9 months ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇩🇪
ps-center
2026-01-27 06:45:57
UTC ·
(9 months ago)
ABV: Web Attack GET /handel/wp-includes/wlwmanifest.xml
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
bigwavedave
2026-01-26 21:35:55
UTC ·
(9 months ago)
Wordpress Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 21:26:24
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.217.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 16:26:20.097769 2026] [security2:error] [pid 12442:tid 12458] [client 152.42.217.73:49181] M ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.217.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 16:26:20.097769 2026] [security2:error] [pid 12442:tid 12458] [client 152.42.217.73:49181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dasperformance.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dasperformance.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXfb_PGtnnGYpJeBJtKWFwAAAMk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
KnightIndustries
2026-01-26 21:09:51
UTC ·
(9 months ago)
2026-01-26T22:09:37.350162+01:00 milkyway wordpress(learncryptography.pw)[2388842]: Authentication attempt for unknown user bot from 152.42.217.73
2026-01-26T22:09:43.953981+01:00 milkyway wordpress(learncryptography.pw)[2388842]: Authentication atte ...
show more
2026-01-26T22:09:37.350162+01:00 milkyway wordpress(learncryptography.pw)[2388842]: Authentication attempt for unknown user bot from 152.42.217.73
2026-01-26T22:09:43.953981+01:00 milkyway wordpress(learncryptography.pw)[2388842]: Authentication attempt for unknown user auditwpmedia from 152.42.217.73
2026-01-26T22:09:50.524588+01:00 milkyway wordpress(learncryptography.pw)[2388842]: Authentication attempt for unknown user wertuslash from 152.42.217.73
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 20:00:44
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.217.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 15:00:39.280302 2026] [security2:error] [pid 23025:tid 23025] [client 152.42.217.73:50270] M ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.217.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 15:00:39.280302 2026] [security2:error] [pid 23025:tid 23025] [client 152.42.217.73:50270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.iostation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.iostation.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXfH51nEQmtFBX-GgJ8pGQAAAAo"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-01-26 19:57:22
UTC ·
(9 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇷
Sklurk
2026-01-26 19:16:11
UTC ·
(9 months ago)
Web App Attack
Web App Attack
🇦🇺
clapper
2026-01-26 16:15:29
UTC ·
(9 months ago)
(mod_security) mod_security (id:5000135) triggered by 152.42.217.73 (SG/Singapore/-): 5 in the last 3600 secs; ID: rub
Brute-Force
Bad Web Bot
🇷🇺
DZBOT
2026-01-26 10:23:30
UTC ·
(9 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇵🇱
ketovoila.pl
2026-01-26 06:50:22
UTC ·
(9 months ago)
ketovoila.pl HONEYPOT traffic: count=4, paths=4; sample_path=www.ketovoila.pl/wp-includes/wlwmanifest.xml; UA=python-requests/2.27.1; window=2026-01-26T06:07:34Z..2026-01-26T06:07:24Z
Port Scan
Hacking
Brute-Force
2026-01-25 20:53:01
UTC ·
(9 months ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.burocontent.nl%, GET /wp-admin/index.php HTTP/1.1, POST /wp-login.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-01-25 20:49:37
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.217.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 15:49:31.439321 2026] [security2:error] [pid 22388:tid 22388] [client 152.42.217.73:56122] M ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.217.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 15:49:31.439321 2026] [security2:error] [pid 22388:tid 22388] [client 152.42.217.73:56122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.justiart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.justiart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXaB28VqXAV-ilWw-Km-sgAAABA"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-25 20:42:33
UTC ·
(9 months ago)
2026-01-25T22:42:33.014635+02:00 zanati wp(sahpa.co.za)[392575]: Blocked user enumeration attempt from 152.42.217.73
...
Web App Attack
🇺🇦
URAN Publishing Service
2026-01-25 19:03:53
UTC ·
(9 months ago)
152.42.217.73 - - [25/Jan/2026:21:03:37 +0200] "GET /wp-login.php HTTP/1.1" 404 2930 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
152.42.217.73 - - [25/Jan/202 ...
show more
152.42.217.73 - - [25/Jan/2026:21:03:37 +0200] "GET /wp-login.php HTTP/1.1" 404 2930 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
152.42.217.73 - - [25/Jan/2026:21:03:52 +0200] "GET /wp-login.php HTTP/1.1" 404 252 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
...
show less
Web App Attack