🇲🇽
octageeks.com
2026-10-28 04:13:59
(15 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
Hippoline
2026-10-27 15:14:40
(1 day ago)
Oct 27 16:14:39 local wp(hippoline.info)[21509]: Authentication attempt for unknown user hippoclaudia from 177.227.60.249
...
Brute-Force
Web App Attack
🇩🇪
Hazzard
2026-10-27 09:06:17
(1 day ago)
(wordpress) Failed wordpress login from 177.227.60.249 (MX/Mexico/Guanajuato/Salamanca/customer-PUE-60-249.megared.net.mx/[redacted]): (CF_ENABLE)
Brute-Force
🇩🇪
hero2026
2026-10-22 22:30:24
(5 days ago)
Blocked by Fail2ban
Web App Attack
🇦🇺
A.i.D.A.N.N
2026-10-22 15:24:58
(6 days ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
🇩🇪
Hazzard
2026-10-20 14:37:04
(1 week ago)
(wordpress) Failed wordpress login from 177.227.60.249 (MX/Mexico/Guanajuato/Salamanca/customer-PUE-60-249.megared.net.mx/[redacted]): (CF_ENABLE)
Brute-Force
🇫🇷
LRob
2026-10-19 21:18:15
(1 week ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Bad Web Bot
🇲🇹
Malta
2026-10-19 00:57:55
(1 week ago)
177.227.60.249 - - [19/Oct/2026:02:57:55 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇳🇱
maxxsense
2026-10-18 08:32:36
(1 week ago)
(wordpress) Failed wordpress login from 177.227.60.249 (MX/Mexico/customer-PUE-60-249.megared.net.mx)
Brute-Force
🇺🇸
TPI-Abuse
2026-10-17 09:22:22
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 177.227.60.249 (customer-PUE-60-249.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:22:18.370194 2026] [security2:error] [pid 15636:tid 156 ...
show more
(mod_security) mod_security (id:225170) triggered by 177.227.60.249 (customer-PUE-60-249.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:22:18.370194 2026] [security2:error] [pid 15636:tid 15636] [client 177.227.60.249:27154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||indoorsfinishing.com.saadeh.ws|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "indoorsfinishing.com.saadeh.ws"] [uri "/wp-json/wp/v2/users"] [unique_id "atM-Sp_iMHKRJ3gJnQZHmwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 01:57:25
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 177.227.60.249 (customer-PUE-60-249.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 21:57:19.073240 2026] [security2:error] [pid 21385:tid 213 ...
show more
(mod_security) mod_security (id:225170) triggered by 177.227.60.249 (customer-PUE-60-249.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 21:57:19.073240 2026] [security2:error] [pid 21385:tid 21385] [client 177.227.60.249:22991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tgaguide.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tgaguide.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atLV_zMaP4lj6dgziI6GkwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-15 05:05:38
(1 week ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 01:26:39
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 177.227.60.249 (customer-PUE-60-249.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:26:32.096998 2026] [security2:error] [pid 10460:tid 104 ...
show more
(mod_security) mod_security (id:225170) triggered by 177.227.60.249 (customer-PUE-60-249.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:26:32.096998 2026] [security2:error] [pid 10460:tid 10460] [client 177.227.60.249:22890] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.webseographics.smogsandiego.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.webseographics.smogsandiego.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atAryIjYJOaEENP1hmQBRAAAABc"], referer: https://www.webseographics.smogsandiego.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 22:55:04
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 177.227.60.249 (customer-PUE-60-249.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:54:58.062133 2026] [security2:error] [pid 10505:tid 105 ...
show more
(mod_security) mod_security (id:225170) triggered by 177.227.60.249 (customer-PUE-60-249.megared.net.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:54:58.062133 2026] [security2:error] [pid 10505:tid 10505] [client 177.227.60.249:31151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kaylamaclaincounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atAIQkzGGKOryYrBeJFXwQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-13 14:57:35
(2 weeks ago)
WordPress attack-tool calls | method: GET | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Web App Attack
Hacking
