🇮🇩
Burayot
2026-06-24 00:27:13
(5 hours ago)
LF_APACHE_403: 161.118.247.129 (SG/Singapore/-), more than 30 Apache 403 hits in the last 3600 secs
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-23 22:27:29
(7 hours ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-06-23 21:14:40
(9 hours ago)
2026/06/23 21:14:39 [error] 3737239#3737239: *325999308 access forbidden by rule, client: 161.118.24 ...
show more
2026/06/23 21:14:39 [error] 3737239#3737239: *325999308 access forbidden by rule, client: 161.118.247.129, server: finami.mx, request: "GET /wp-login.php HTTP/2.0", host: "finami.mx"
2026/06/23 21:14:39 [error] 3737239#3737239: *325999313 access forbidden by rule, client: 161.118.247.129, server: finami.mx, request: "GET /wp-admin/ HTTP/2.0", host: "finami.mx"
2026/06/23 21:14:39 [error] 3737243#3737243: *325996457 access forbidden by rule, client: 161.118.247.129, server: finami.mx, request: "GET /wp-admin/admin-ajax.php HTTP/2.0", host: "finami.mx"
...
show less
Web App Attack
🇳🇱
Site.eu
2026-06-23 20:42:12
(9 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
WizardsToolkit
2026-06-23 19:37:28
(10 hours ago)
attempted to access /wp-includes/class-wp.php
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 18:56:00
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 161.118.247.129 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 161.118.247.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 14:55:51.930845 2026] [security2:error] [pid 21632:tid 21632] [client 161.118.247.129:60811] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||casaluzislamujeres.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "casaluzislamujeres.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajrWt5wNh3zUN0zIeRmxrgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-06-23 14:40:15
(15 hours ago)
[redacted] 161.118.247.129 - - [23/Jun/2026:15:40:13 +0100] "GET /[redacted] HTTP/1.1" 302 6783 0/72 ...
show more
[redacted] 161.118.247.129 - - [23/Jun/2026:15:40:13 +0100] "GET /[redacted] HTTP/1.1" 302 6783 0/72347 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" [redacted] 161.118.247.129 - - [23/Jun/2026:15:40:14 +0100] "GET /wp-admin/ HTTP/1.1" 301 618 0/6458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15"
show less
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-06-23 09:51:28
(20 hours ago)
2026/06/23 09:51:25 [error] 3584945#3584945: *324889141 access forbidden by rule, client: 161.118.24 ...
show more
2026/06/23 09:51:25 [error] 3584945#3584945: *324889141 access forbidden by rule, client: 161.118.247.129, server: fastcredit.net.ua, request: "GET /wp-login.php HTTP/2.0", host: "fastcredit.net.ua"
2026/06/23 09:51:27 [error] 3584946#3584946: *324898639 access forbidden by rule, client: 161.118.247.129, server: fastcredit.net.ua, request: "GET /wp-content/plugins/ HTTP/2.0", host: "fastcredit.net.ua"
2026/06/23 09:51:27 [error] 3584944#3584944: *324896523 access forbidden by rule, client: 161.118.247.129, server: fastcredit.net.ua, request: "GET /wp-includes/version.php HTTP/2.0", host: "fastcredit.net.ua"
...
show less
Web App Attack
2026-06-23 09:17:27
(21 hours ago)
CMS (WordPress or Joomla) brute force attempt.
Brute-Force
🇺🇸
mnsf
2026-06-23 07:05:50
(23 hours ago)
Login Too Frequent (7)
Brute-Force
Web App Attack
2026-06-23 06:05:17
(1 day ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (11/60 min)'; Requests=11
Port Scan
🇮🇹
VHosting
2026-06-23 04:05:03
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇦🇺
rubixstudios
2026-06-23 04:05:02
(1 day ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇫🇷
Octopuce
2026-06-22 21:49:22
(1 day ago)
Aggressive web search of vulnerable pages: /wp-login.php /wp-admin/ /wp-admin/admin-ajax.php /wp-adm ...
show more
Aggressive web search of vulnerable pages: /wp-login.php /wp-admin/ /wp-admin/admin-ajax.php /wp-admin/load-scripts.php /wp-admin/load-styles.p ...
show less
Web App Attack
🇧🇪
cmbplf
2026-06-22 21:27:58
(1 day ago)
6.423 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot