🇩🇪
iNetWorker
2026-06-13 06:16:51
(26 minutes ago)
trolling for resource vulnerabilities
Web App Attack
🇮🇹
Inartis
2026-06-13 05:47:42
(55 minutes ago)
16.61.62.181 - - [13/Jun/2026:05:47:41 +0000] "POST /xmlrpc.php HTTP/2.0" 200 50937 "-" "Mozilla/5.0 ...
show more
16.61.62.181 - - [13/Jun/2026:05:47:41 +0000] "POST /xmlrpc.php HTTP/2.0" 200 50937 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-13 04:30:07
(2 hours ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇺🇸
CollideTech
2026-06-13 03:03:34
(3 hours ago)
probing for vulnerabilities
Web App Attack
🇺🇸
mnsf
2026-06-13 01:05:29
(5 hours ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
2026-06-12 23:05:39
(7 hours ago)
2026-06-13T01:05:38.915078+02:00 aion wordpress[225218]: Blocked user enumeration attempt from 16.61 ...
show more
2026-06-13T01:05:38.915078+02:00 aion wordpress[225218]: Blocked user enumeration attempt from 16.61.62.181
...
show less
Hacking
Brute-Force
🇩🇪
FeG Deutschland
2026-06-12 16:23:54
(14 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇲🇽
octageeks.com
2026-06-12 04:17:23
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
tecnicorioja
2026-06-11 22:01:00
(1 day ago)
wp-login attack [11/Jun/2026:10:51:37
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 19:25:23
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 16.61.62.181 (ec2-16-61-62-181.eu-west-2.comput ...
show more
(mod_security) mod_security (id:225170) triggered by 16.61.62.181 (ec2-16-61-62-181.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 15:25:16.110765 2026] [security2:error] [pid 21987:tid 21987] [client 16.61.62.181:60018] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||constructiondomex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "constructiondomex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aisLnP-6rTdEgpyN8zDxxgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 16:06:06
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 16.61.62.181 (ec2-16-61-62-181.eu-west-2.comput ...
show more
(mod_security) mod_security (id:225170) triggered by 16.61.62.181 (ec2-16-61-62-181.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:06:00.154167 2026] [security2:error] [pid 23600:tid 23600] [client 16.61.62.181:35854] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iee-usa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iee-usa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "airc6G3GOR4Ro42gxB29eQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-06-11 16:00:39
(1 day ago)
WordPress author enumeration
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 15:32:59
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 16.61.62.181 (ec2-16-61-62-181.eu-west-2.comput ...
show more
(mod_security) mod_security (id:225170) triggered by 16.61.62.181 (ec2-16-61-62-181.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:32:54.697812 2026] [security2:error] [pid 21606:tid 21606] [client 16.61.62.181:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||avaliantlife.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "avaliantlife.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "airVJqK8f-F39sDimRWuxQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-11 15:15:50
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 15:15:26
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 16.61.62.181 (ec2-16-61-62-181.eu-west-2.comput ...
show more
(mod_security) mod_security (id:225170) triggered by 16.61.62.181 (ec2-16-61-62-181.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:15:21.232978 2026] [security2:error] [pid 4475:tid 4480] [client 16.61.62.181:41206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sunshinepumpers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sunshinepumpers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "airRCRXizEVXVo4h4T2JbQAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack