🇲🇽
Centynova Corp.
2026-08-26 01:43:33
(1 day ago)
Blocked by threat detection service. Centynova Security [Fuerza bruta y Ataque a servicios web]
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-08-25 22:00:12
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-08-18 16:59:11
(1 week ago)
WordPress probing | req: /blog/wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb ...
show more
WordPress probing | req: /blog/wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Brute-Force
Web App Attack
🇨🇦
DRI
2026-07-29 15:09:51
(4 weeks ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 11:11:17
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 07:11:10.599918 2026] [security2:error] [pid 6512:tid 6866] [client 178.20.30.121:31441] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||transiit.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transiit.org"] [uri "/wp-json/wp/v2/users"] [unique_id "amXrTkSmd3r-VN1gEmljfAAAAFc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 07:44:44
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 03:44:35.734814 2026] [security2:error] [pid 228469:tid 228581] [client 178.20.30.121:65451] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||killerrockandroll.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "killerrockandroll.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amW64_vbIhFVZaaBFjIuZwAAARg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 00:48:23
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 20:48:20.654801 2026] [security2:error] [pid 4632:tid 4632] [client 178.20.30.121:56853] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||enfiestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enfiestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amVZVEFqOw22tYoKBP2OiwAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 09:16:47
(1 month ago)
(mod_security) mod_security (id:211030) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211030) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:16:43.516834 2026] [security2:error] [pid 156857:tid 156857] [client 178.20.30.121:39679] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||powerkiteforum.com|F|2"] [data "Matched Data: ('~'||( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "powerkiteforum.com"] [uri "/search.php"] [unique_id "al84--oAw7WsHZzCKW8kZgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 23:23:39
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 19:23:32.489968 2026] [security2:error] [pid 30910:tid 30910] [client 178.20.30.121:45969] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||henrietteg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "henrietteg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alln9EHvxQAWfD5CZXpNHgAAACY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-16 17:56:39
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 21:05:35
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 17:05:31.845420 2026] [security2:error] [pid 4047:tid 4047] [client 178.20.30.121:22149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gbaker.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gbaker.us"] [uri "/wp-json/wp/v2/users"] [unique_id "alakm2GzmyYLJzmcw0jqfQAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-03-26 20:10:59
(5 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2025-02-03 02:10:45
(1 year ago)
WP Login Scan Activities
Web App Attack
🇨🇭
backslash
2025-01-31 14:30:07
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2025-01-31 06:40:21
(1 year ago)
WP Login Scan Activities
Web App Attack