2026-06-15 19:21:43
(19 hours ago)
[osotir.org] httpd-login-post-daily: sites=agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.lo ...
show more
[osotir.org] httpd-login-post-daily: sites=agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.log; samples=/wp-login.php?redirect_to=https%3A%2F%2Fagonistes.gr%2Fwp-admin%2Findex.php&reauth=1 | /wp-login.php | /wp-admin/index.php
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 18:13:44
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 2002:ae8a:153f::ae8a:153f (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:ae8a:153f::ae8a:153f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 14:13:38.793663 2026] [security2:error] [pid 4298:tid 4298] [client 2002:ae8a:153f::ae8a:153f:52281] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manaplas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manaplas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajBA0tCZ0wyHCVUlzOfgdAAAAAg"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
roxyapi
2026-06-15 17:27:09
(21 hours ago)
Honeypot: automated vulnerability scan / web app attack. Last probe: GET /wp-admin
Web App Attack
Bad Web Bot
🇳🇱
Site.eu
2026-06-15 16:42:55
(22 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇧🇪
Saec
2026-06-15 15:30:07
(23 hours ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (6× on saec.me)
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 15:17:13
(23 hours ago)
(mod_security) mod_security (id:225170) triggered by 174.138.21.63 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 174.138.21.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 11:17:08.395122 2026] [security2:error] [pid 8038:tid 8038] [client 174.138.21.63:56348] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||babylontravelone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "babylontravelone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajAXdHfLqtIayUxWjxaRpAAAAAw"], referer: https://t.co/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-15 14:30:12
(1 day ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇩🇪
Ba-Yu
2026-06-15 11:40:47
(1 day ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
webgobe
2026-06-15 10:42:56
(1 day ago)
dee-6 : Trying access system files=>/license.txt(license.txt)
Hacking
2026-06-15 06:38:19
(1 day ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇮🇹
zenmorro
2026-06-15 06:36:17
(1 day ago)
Honeypot hit (imperocms:0) — [scanner_ua] User Agent scanner: python-requests/2.27.1 | GET /license. ...
show more
Honeypot hit (imperocms:0) — [scanner_ua] User Agent scanner: python-requests/2.27.1 | GET /license.txt | UA: python-requests/2.27.1 | Pattern: /python-requests\/[0-9]/i. Automated report from honeypot infrastructure
show less
Port Scan
🇮🇹
VHosting
2026-06-15 03:10:02
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-06-15 01:19:30
(1 day ago)
10 attempts against mh-misc-ban on ec102932
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:58:40
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 174.138.21.63 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 174.138.21.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:58:33.981310 2026] [security2:error] [pid 7382:tid 7382] [client 174.138.21.63:49823] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manaplas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manaplas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8kCazTV8314-04ZTCMkAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-14 21:00:27
(1 day ago)
15 attempts against mh-modsecurity-ban on ec102932
Brute-Force
Web App Attack