🇲🇽
octageeks.com
2026-06-27 04:07:11
(16 hours ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
lostswordfish.com
2026-06-26 18:52:04
(1 day ago)
Wordfence waf block on ncrsol
Web App Attack
🇨🇿
ptlab
2026-06-26 18:45:13
(1 day ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
2026-06-26 18:20:18
(1 day ago)
Web attack blocked by Wordfence on kunstkringhenrijonas.nl (1 hit). Reported by CRMON.
Web App Attack
🇺🇸
cwytech
2026-06-26 17:54:42
(1 day ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.
Bad Web Bot
Web App Attack
🇩🇪
AlexEventfahrtenIPDB
2026-06-26 16:48:00
(1 day ago)
[Fri Jun 26 18:47:59.701856 2026] [authz_core:error] [pid 1173941:tid 1173941] [client 178.105.180.7 ...
show more
[Fri Jun 26 18:47:59.701856 2026] [authz_core:error] [pid 1173941:tid 1173941] [client 178.105.180.72:34816] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php
[Fri Jun 26 18:47:59.996811 2026] [authz_core:error] [pid 1320416:tid 1320416] [client 178.105.180.72:34826] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.spdns.de/wp-login.php
...
show less
Brute-Force
Web App Attack
🇲🇹
Malta
2026-06-26 14:58:31
(1 day ago)
178.105.180.72 - - [26/Jun/2026:16:58:31 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Lin ...
show more
178.105.180.72 - - [26/Jun/2026:16:58:31 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇫🇮
YF
2026-06-26 06:00:25
(1 day ago)
WordPress author enumeration
Web App Attack
🇩🇪
FeG Deutschland
2026-06-26 05:16:37
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 05:09:27
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.105.180.72 (static.72.180.105.178.clients.y ...
show more
(mod_security) mod_security (id:225170) triggered by 178.105.180.72 (static.72.180.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 01:09:21.797694 2026] [security2:error] [pid 31824:tid 31850] [client 178.105.180.72:46596] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cjherbalremedies.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cjherbalremedies.com"] [uri "/wp-json/wp/v2/users/9"] [unique_id "aj4JgUS3tjrr5i2EJceJFAAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-06-26 04:59:11
(1 day ago)
(wordpress) Failed wordpress login from 178.105.180.72 (DE/Germany/Bavaria/Nuremberg/static.72.180.1 ...
show more
(wordpress) Failed wordpress login from 178.105.180.72 (DE/Germany/Bavaria/Nuremberg/static.72.180.105.178.clients.your-server.de/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-26 04:50:54
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.105.180.72 (static.72.180.105.178.clients.y ...
show more
(mod_security) mod_security (id:225170) triggered by 178.105.180.72 (static.72.180.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 00:50:50.372570 2026] [security2:error] [pid 30745:tid 30745] [client 178.105.180.72:41084] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pastorjohndunning.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pastorjohndunning.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj4FKvLP8etGdLZacKizxwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
jay hung
2026-05-28 08:25:28
(4 weeks ago)
2026-05-28T08:25:27.506195+00:00 quarktech kernel: [412828.445223] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ...
show more
2026-05-28T08:25:27.506195+00:00 quarktech kernel: [412828.445223] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=178.105.180.72 DST=172.237.20.248 LEN=1280 TOS=0x00 PREC=0x00 TTL=40 ID=42385 DF PROTO=UDP SPT=43661 DPT=443 LEN=1260
...
show less
Port Scan