🇬🇧
consul.to
2026-10-06 22:38:54
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
Vegascosmetics
2025-12-28 22:50:44
(9 months ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2025-12-25 02:25:30
(9 months ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot
🇦🇹
Markus Woegerbauer
2025-12-24 23:38:37
(9 months ago)
(wordpress) Failed wordpress login from 174.138.24.56 (SG/Singapore/-)
Brute-Force
🇺🇸
TPI-Abuse
2025-12-24 20:47:55
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 174.138.24.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 174.138.24.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 15:47:49.244833 2025] [security2:error] [pid 2988327:tid 2988327] [client 174.138.24.56:64245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mdivietnam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mdivietnam.com"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "aUxRddEwcpAxOH6rr6kTsQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-23 23:48:11
(9 months ago)
wordpress-trap
Web App Attack
🇳🇿
Antinson
2025-12-23 21:16:02
(9 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-23 18:45:09
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 174.138.24.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 174.138.24.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 13:45:01.449213 2025] [security2:error] [pid 23000:tid 23000] [client 174.138.24.56:57483] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mchen-arch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mchen-arch.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUrjLf4nDTxlsRdi8BdnkwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2025-12-23 14:41:37
(9 months ago)
http-probing - IP: 174.138.24.56 - time="2025-12-23T15:41:36+01:00" level=info msg="(555f66b4f6a745 ...
show more
http-probing - IP: 174.138.24.56 - time="2025-12-23T15:41:36+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 174.138.24.56 (SG/14061) : 4h ban on Ip 174.138.24.56" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-23 09:49:51
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 174.138.24.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 174.138.24.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 04:49:46.702829 2025] [security2:error] [pid 3892:tid 3892] [client 174.138.24.56:52345] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mcbrearty.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mcbrearty.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUplus62z3Iwi_xBpMFSSgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-23 02:26:33
(9 months ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇷🇺
DZBOT
2025-12-22 11:18:45
(9 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-12-22 05:46:30
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 174.138.24.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 174.138.24.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 00:46:00.125685 2025] [security2:error] [pid 20584:tid 20584] [client 174.138.24.56:56185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maycockfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maycockfamily.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "aUjbGKM5lWwQ0jbqzb02wAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2025-12-21 20:17:25
(9 months ago)
10 attempts against mh-misc-ban on ec102959
Web App Attack
🇧🇪
cmbplf
2025-12-21 15:26:01
(9 months ago)
26.627 requests with url.path */xmlrpc.php
685 requests with url.path */wp-includes/wlwmanifest.xm ...
show more
26.627 requests with url.path */xmlrpc.php
685 requests with url.path */wp-includes/wlwmanifest.xml
show less
Brute-Force
Bad Web Bot
