🇺🇸
ipblock.com
2026-10-05 02:50:00
(1 day ago)
IPBlock protected site ID [4055-d][s=03].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-10-04 19:09:10
(2 days ago)
Wordpress hacking attempt
Web App Attack
🇮🇹
VHosting
2026-09-11 18:15:03
(3 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
FD-IX
2026-08-17 06:45:59
(1 month ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-06-12 21:58:34
(3 months ago)
IM360 WAF: WordPress plugin/theme auto install block
Web App Attack
🇫🇮
inlink.ltd
2026-05-26 15:34:21
(4 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇬🇧
Steve
2026-03-22 11:59:12
(6 months ago)
Repeated attempts against wordpress site
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-01-28 06:47:27
(8 months ago)
(mod_security) mod_security (id:240335) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 01:47:21.517166 2026] [security2:error] [pid 6762:tid 6762] [client 178.20.30.160:28587] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 178.20.30.160 (+1 hits since last alert)|stardancertantra.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stardancertantra.com"] [uri "/xmlrpc.php"] [unique_id "aXmw-e3GbsZ1Gp8DNnUDuwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-01-24 09:57:27
(8 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
2025-12-23 15:03:06
(9 months ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-02 17:52:42
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 13:52:35.814341 2025] [security2:error] [pid 17981:tid 17981] [client 178.20.30.160:63527] [client 178.20.30.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-15Y1SDPZOnLP-Jjb7TuQAAABA"], referer: https://jolankagroup.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2025-03-29 04:06:51
(1 year ago)
Wordpress malicious attack:[octascan]
Web App Attack
🇺🇸
TPI-Abuse
2025-03-27 09:49:08
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 05:49:01.274786 2025] [security2:error] [pid 31936:tid 31936] [client 178.20.30.160:40035] [client 178.20.30.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||blaslandsporthorses.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/canto/includes/lib/download.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blaslandsporthorses.com"] [uri "/wp-content/plugins/canto/includes/lib/download.php"] [unique_id "Z-UfDXtNk02Fk-eQZ9MSMwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-21 04:14:57
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 21 00:14:51.876018 2025] [security2:error] [pid 6948:tid 6948] [client 178.20.30.160:20887] [client 178.20.30.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||www.avaliantlife.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.avaliantlife.com"] [uri "/wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [unique_id "Z9znu0Ozeznp-uP7WdETvAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-12 13:07:51
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211120) triggered by 178.20.30.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 12 09:07:44.933224 2025] [security2:error] [pid 24004:tid 24004] [client 178.20.30.160:41519] [client 178.20.30.160] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||aimer.es|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/wp-super-cache/js/cache-loader.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aimer.es"] [uri "/wp-content/plugins/wp-super-cache/js/cache-loader.php"] [unique_id "Z9GHIEEOVPTeBO1ikA1LwAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
