🇺🇸
Epimetheus
2026-07-14 08:22:38
(1 hour ago)
Unauthorized access attempts:
[GET] /license.txt
UA: python-requests/2.27.1
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-07-14 08:06:19
(1 hour ago)
Web vulnerability scanning
Brute-Force
Web Spam
Web App Attack
🇩🇪
thesimonmanuel
2026-07-14 06:23:01
(3 hours ago)
168.144.106.227 - - [14/Jul/2026:11:52:57 +0530] "GET /license.txt HTTP/1.1" 200 7302 "-" "python-re ...
show more
168.144.106.227 - - [14/Jul/2026:11:52:57 +0530] "GET /license.txt HTTP/1.1" 200 7302 "-" "python-requests/2.27.1" "168.144.106.227"
show less
Web App Attack
🇦🇺
AWW-Admin
2026-07-13 23:28:00
(10 hours ago)
(wordpress) Failed wordpress login from 168.144.106.227 (SG/Singapore/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-13 23:24:23
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 19:24:17.420326 2026] [security2:error] [pid 2460102:tid 2460102] [client 2002:a890:6ae3::a890:6ae3:52085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rodandreelpiercam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodandreelpiercam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alVzoSWPKPbMMI-jhaMjQAAAAAc"], referer: https://wordpress.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-13 22:24:06
(11 hours ago)
(PERMBLOCK) 168.144.106.227 (SG/Singapore/-) has had more than 4 temp blocks in the last 86400 secs ...
show more
(PERMBLOCK) 168.144.106.227 (SG/Singapore/-) has had more than 4 temp blocks in the last 86400 secs (0-196)
show less
Hacking
🇳🇱
Mangelot Hosting
2026-07-13 22:16:14
(11 hours ago)
(wp_login_try) srv104 WP Login Attempt 2002:a890:6ae3::a890:6ae3 (US/United States/-): 10 in the las ...
show more
(wp_login_try) srv104 WP Login Attempt 2002:a890:6ae3::a890:6ae3 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 20:45:26
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 16:45:20.465286 2026] [security2:error] [pid 17361:tid 17361] [client 2002:a890:6ae3::a890:6ae3:65208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sacoriverjazz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sacoriverjazz.org"] [uri "/wp-json/wp/v2/users"] [unique_id "alVOYIIh-007QsAW2Z-hxwAAACA"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-07-13 20:25:28
(13 hours ago)
AutoBlock: 🔐 WordPress Login Brute Force (40X) (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Bas ...
show more
AutoBlock: 🔐 WordPress Login Brute Force (40X) (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 20:14:46
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 16:14:38.322873 2026] [security2:error] [pid 31667:tid 31667] [client 2002:a890:6ae3::a890:6ae3:58952] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rwabutazafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rwabutazafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "alVHLjL6wCUA-o4ufoDxKQAAAAY"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-13 20:03:49
(13 hours ago)
(wordpress) Apache: Failed WordPress login from 168.144.106.227 (SG/Singapore/-): 10 in the last 360 ...
show more
(wordpress) Apache: Failed WordPress login from 168.144.106.227 (SG/Singapore/-): 10 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-13 19:35:10
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 15:35:04.637271 2026] [security2:error] [pid 23436:tid 23436] [client 2002:a890:6ae3::a890:6ae3:50754] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ronjamestelevision.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ronjamestelevision.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alU96D89CTMrHHVyQTZAkQAAAAo"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 18:58:46
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:a890:6ae3::a890:6ae3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 14:58:39.012177 2026] [security2:error] [pid 32249:tid 32249] [client 2002:a890:6ae3::a890:6ae3:54501] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rogerheath.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rogerheath.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alU1X9a_exQJr2hUpJOUpgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-07-13 17:28:42
(16 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇳🇱
Site.eu
2026-07-13 17:16:34
(16 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH