🇯🇵
Valhalla
2026-06-23 12:23:47
(1 hour ago)
/xmlrpc.php
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 22:27:24
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 177.129.252.53 (r-53.252.129.177.in-addr.arpa.m ...
show more
(mod_security) mod_security (id:225170) triggered by 177.129.252.53 (r-53.252.129.177.in-addr.arpa.maxcomm.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 18:27:19.685665 2026] [security2:error] [pid 8975:tid 8975] [client 177.129.252.53:21886] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||innovacionesnimba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "innovacionesnimba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajm2x9GETmqXWJNPISnANgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-22 22:15:39
(15 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-22 13:11:20
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 177.129.252.53 (r-53.252.129.177.in-addr.arpa.m ...
show more
(mod_security) mod_security (id:225170) triggered by 177.129.252.53 (r-53.252.129.177.in-addr.arpa.maxcomm.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 09:11:14.539824 2026] [security2:error] [pid 2195:tid 2195] [client 177.129.252.53:10634] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tedharris.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tedharris.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajk0coqVbpzLrVsyaZoftwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-06-22 00:27:19
(1 day ago)
Wordpress hacking attempt
Web App Attack
2026-06-22 00:16:26
(1 day ago)
apache vulnerability scan
Web App Attack
🇩🇪
Tha_14
2026-06-21 18:55:59
(1 day ago)
Limit on login attempts is reached
Brute-Force
🇨🇭
4server
2026-06-21 13:20:28
(2 days ago)
[SunJun2115:20:24.2148462026][security2:error][pid392640:tid392648][client177.129.252.53:0]ModSecuri ...
show more
[SunJun2115:20:24.2148462026][security2:error][pid392640:tid392648][client177.129.252.53:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"labaita-lanzo.it\"][uri\"/xmlrpc.php\"][unique_id\"ajflGCcOWVN-snG9t02kSAAAAEY\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 19:21:55
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 177.129.252.53 (r-53.252.129.177.in-addr.arpa.m ...
show more
(mod_security) mod_security (id:225170) triggered by 177.129.252.53 (r-53.252.129.177.in-addr.arpa.maxcomm.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 15:21:48.748817 2026] [security2:error] [pid 18751:tid 18751] [client 177.129.252.53:21998] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pharmaceuticalsalescertifications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pharmaceuticalsalescertifications.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajboTG-8VRejtIU16_QvIQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-20 16:34:05
(2 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇩🇪
netclix.gr
2026-06-20 14:29:52
(2 days ago)
(wordpress) Failed wordpress login from 177.129.252.53 (BR/Brazil/r-53.252.129.177.in-addr.arpa.maxc ...
show more
(wordpress) Failed wordpress login from 177.129.252.53 (BR/Brazil/r-53.252.129.177.in-addr.arpa.maxcomm.com.br): (CF_ENABLE)
show less
Brute-Force
🇺🇸
Penny Packer
2026-06-20 00:49:39
(3 days ago)
Fail2Ban apache-tripwires
Web App Attack
🇳🇱
wlt-blocker
2026-06-19 19:45:16
(3 days ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 18:11:14
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 177.129.252.53 (r-53.252.129.177.in-addr.arpa.m ...
show more
(mod_security) mod_security (id:225170) triggered by 177.129.252.53 (r-53.252.129.177.in-addr.arpa.maxcomm.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 14:11:09.198469 2026] [security2:error] [pid 12362:tid 12362] [client 177.129.252.53:24871] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||greenmountainfeeds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greenmountainfeeds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWGPV0SEko9o6PmK2NnsgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-17 22:10:11
(5 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack