🇩🇪
karger
2025-09-24 22:36:28
(8 months ago)
Wordpress attack - soft filter
Brute-Force
Web App Attack
🇪🇸
10dencehispahard SL
2025-09-22 05:33:23
(8 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
2025-09-20 22:55:09
(8 months ago)
2025-09-21T00:55:08.979997+02:00 zanati wp(www.sahpa.co.za)[164856]: Blocked authentication attempt ...
show more
2025-09-21T00:55:08.979997+02:00 zanati wp(www.sahpa.co.za)[164856]: Blocked authentication attempt for Ncube from 154.94.15.41
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-09-07 10:04:56
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 154.94.15.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.15.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 06:04:53.881766 2025] [security2:error] [pid 1546:tid 1546] [client 154.94.15.41:59463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||marionenv.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marionenv.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aL1YxbuJw4KS8UmRvXR5JwAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-16 11:10:40
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇱🇻
garmtech.com
2025-08-15 08:16:40
(10 months ago)
IM360 WAF: WordPress plugin/theme auto install block
Web App Attack
🇺🇸
island-freaks.com
2025-07-23 08:13:22
(10 months ago)
Attack Type: WordPress Exploit Bot attempt on /wp-login.php | DNS 154.94.15.41 | Agent: Mozilla/5.0 ...
show more
Attack Type: WordPress Exploit Bot attempt on /wp-login.php | DNS 154.94.15.41 | Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203
show less
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 20:17:13
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 154.94.15.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.15.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 16:17:06.925800 2025] [security2:error] [pid 10455:tid 10455] [client 154.94.15.41:34111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dunningtons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dunningtons.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aHgIwlKPvrCO1d68MDe5jAAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 08:55:43
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 154.94.15.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.15.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 04:55:36.059671 2025] [security2:error] [pid 10284:tid 10284] [client 154.94.15.41:49661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||edensgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edensgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aHdpCNDgqlhRPEb3fYk2FAAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-16 06:37:20
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-07-14 11:01:49
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇭
backslash
2025-06-12 14:55:05
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇬🇧
SilverZippo
2025-06-05 02:23:08
(1 year ago)
Web App Attack
Web App Attack
🇦🇺
MAGIC
2025-05-14 20:07:41
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2025-05-03 19:04:21
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot