🇬🇧
gigatech
2026-09-28 14:15:05
(7 hours ago)
Webserver Probing
Web App Attack
🇫🇷
dynamix
2026-09-27 15:31:57
(1 day ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇫🇮
abdubhai
2026-09-27 09:52:04
(1 day ago)
168.144.186.136 - - [27/Sep/2026
...
Brute-Force
🇮🇹
🐷🐷🐷
2026-09-27 05:13:32
(1 day ago)
Multiple WordPress unauthorized access attempts
...
Brute-Force
Bad Web Bot
🇲🇽
octageeks.com
2026-09-27 04:15:21
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 04:27:01
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.186.136 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.186.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 00:26:56.758428 2026] [security2:error] [pid 20428:tid 20428] [client 168.144.186.136:57395] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rotentendales.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rotentendales.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ardJkO9Qm2_pYFmXOixrlQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
masterguru
2026-09-26 04:08:14
(2 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-169)
Hacking
🇺🇸
TPI-Abuse
2026-09-26 00:35:52
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.186.136 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.186.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 20:35:44.065454 2026] [security2:error] [pid 19379:tid 19379] [client 168.144.186.136:61473] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||reyadecostarica.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reyadecostarica.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arcTYDfnHD-x8_yzQ3OGOgAAAAo"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-26 00:17:44
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12457
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 21:09:51
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.186.136 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.186.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:09:47.786704 2026] [security2:error] [pid 24771:tid 24771] [client 168.144.186.136:61069] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||advantagept.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "advantagept.org"] [uri "/wp-json/wp/v2/users"] [unique_id "arbjGy7JYK9KKFjII50wtwAAAAo"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-25 19:16:49
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇧🇪
madeit
2026-09-25 12:51:34
(3 days ago)
Web App Attack
2026-09-24 22:38:02
(3 days ago)
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-login.php?redirect_to=h ...
show more
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Fparochiesintmaarten, GET /wp-admin/index.php HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 04:09:34
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.186.136 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.186.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:09:30.056836 2026] [security2:error] [pid 12508:tid 12508] [client 168.144.186.136:61341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.azcrittergetter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.azcrittergetter.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arSietLTU_kWSR2pTTAXIQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-23 19:46:29
(5 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
