2025-11-08 18:16:19
(7 months ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 05:04:18
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 163.44.198.41 (cpanel02wh.bkk1.cloud.z.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 163.44.198.41 (cpanel02wh.bkk1.cloud.z.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 01:04:15.262129 2025] [security2:error] [pid 28879:tid 28879] [client 163.44.198.41:36422] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.stinsonbeachsurfandkayak.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.stinsonbeachsurfandkayak.com"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aPhlz19wEhd6Fb5OBxtyOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-22 03:01:19
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 163.44.198.41 (cpanel02wh.bkk1.cloud.z.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 163.44.198.41 (cpanel02wh.bkk1.cloud.z.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 23:01:13.419144 2025] [security2:error] [pid 27799:tid 27799] [client 163.44.198.41:51284] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bigislandhawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bigislandhawaiirealty.com"] [uri "/wp-json/wp/V2/users"] [unique_id "aPhI-eQtm8R4yHSiKnoChQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-21 18:34:20
(7 months ago)
Failed Wordpress Logins
Web App Attack
🇩🇪
Hazzard
2025-10-20 03:15:31
(7 months ago)
(wordpress) Failed wordpress login from 163.44.198.41 (TH/Thailand/Bangkok/Bangkok/cpanel02wh.bkk1.c ...
show more
(wordpress) Failed wordpress login from 163.44.198.41 (TH/Thailand/Bangkok/Bangkok/cpanel02wh.bkk1.cloud.z.com/[redacted])
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-10-19 15:13:29
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 163.44.198.41 (cpanel02wh.bkk1.cloud.z.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 163.44.198.41 (cpanel02wh.bkk1.cloud.z.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 11:13:22.308753 2025] [security2:error] [pid 7158:tid 7158] [client 163.44.198.41:35322] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zoesaadeh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zoesaadeh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPUAEt1_BMoHNOF3iBLogQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2025-10-19 09:18:37
(7 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇩🇪
stinpriza
2025-10-15 22:30:57
(7 months ago)
Web App Attack
Web App Attack
2025-10-13 10:47:22
(8 months ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
TPI-Abuse
2025-10-09 15:38:05
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 163.44.198.41 (cpanel02wh.bkk1.cloud.z.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 163.44.198.41 (cpanel02wh.bkk1.cloud.z.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 11:38:01.680571 2025] [security2:error] [pid 14419:tid 14419] [client 163.44.198.41:40094] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rkhindustries.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rkhindustries.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOfW2Sl1AbOO0u-ZK6nQvgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2025-10-04 05:32:17
(8 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2025-10-04 04:06:21
(8 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
2025-09-27 18:00:16
(8 months ago)
Failed Wordpress Logins
Web App Attack
🇫🇷
tecnicorioja
2025-09-23 22:00:27
(8 months ago)
POST /xmlrpc.php [23/Sep/2025:23:29:21
Brute-Force
Web App Attack
🇳🇱
ipoac.nl
2025-09-23 16:01:16
(8 months ago)
2025-09-23T18:01:14.698360+02:00 ipoac.nl wordpress(***)[3597958]: Authentication failure for***from ...
show more
2025-09-23T18:01:14.698360+02:00 ipoac.nl wordpress(***)[3597958]: Authentication failure for***from 163.44.198.41
show less
Web App Attack