🇲🇽
octageeks.com
2026-08-28 04:17:48
(35 minutes ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
masterguru
2026-08-28 03:41:11
(1 hour ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 162.254.39.110 (US/United States/server337.we ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 162.254.39.110 (US/United States/server337.web-hosting.com): 1 in the last 3600 secs (0-196)
show less
Hacking
🇺🇸
www.winos.me
2026-08-28 02:55:10
(1 hour ago)
Scanning for sensitive files/paths: /wp-login.php
Hacking
Web App Attack
🇫🇷
masterguru
2026-08-28 02:12:42
(2 hours ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 162.254.39.110 (US/United States/server337.we ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 162.254.39.110 (US/United States/server337.web-hosting.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-08-28 02:00:05
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 162.254.39.110 (server337.web-hosting.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 162.254.39.110 (server337.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 21:59:55.719609 2026] [security2:error] [pid 14286:tid 14286] [client 162.254.39.110:50370] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dougrhodes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dougrhodes.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apDrm-SbDawCo0kB_QNh_QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 23:49:40
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 162.254.39.110 (server337.web-hosting.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 162.254.39.110 (server337.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 19:49:37.107877 2026] [security2:error] [pid 5191:tid 5191] [client 162.254.39.110:60322] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||onlinesuretybonds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "onlinesuretybonds.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apDNETB0uqxv1eOs_vZUOQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-27 22:01:58
(6 hours ago)
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇫🇷
tecnicorioja
2026-08-27 22:00:50
(6 hours ago)
wp-login attack [27/Aug/2026:20:21:58
Brute-Force
Web App Attack
2026-08-27 21:15:23
(7 hours ago)
Web attack blocked by Wordfence on vestingstadvalkenburg.nl (1 hit). Reported by CRMON.
Web App Attack
🇩🇪
Hazzard
2026-08-27 20:01:51
(8 hours ago)
(wordpress) Failed wordpress login from 162.254.39.110 (US/United States/California/Los Angeles/serv ...
show more
(wordpress) Failed wordpress login from 162.254.39.110 (US/United States/California/Los Angeles/server337.web-hosting.com/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇺🇸
lostswordfish.com
2026-08-27 18:36:03
(10 hours ago)
Wordfence waf block on decarcerationnation
Web App Attack
🇬🇧
spamverify.com
2026-08-27 17:48:41
(11 hours ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 16:20:29
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 162.254.39.110 (server337.web-hosting.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 162.254.39.110 (server337.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:20:24.519174 2026] [security2:error] [pid 21719:tid 21719] [client 162.254.39.110:39592] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||webuychesterfieldhouses.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "webuychesterfieldhouses.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apBjyApKVgPagvyHr1ntRgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-08-27 15:01:23
(13 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 13:58:53
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 162.254.39.110 (server337.web-hosting.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 162.254.39.110 (server337.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:58:48.805205 2026] [security2:error] [pid 10970:tid 10970] [client 162.254.39.110:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||forsaleincr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "forsaleincr.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apBCmJfU203cj5TAB4J5sQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack