🇳🇱
ipoac.nl
2026-07-01 08:26:27
(2 hours ago)
2026-07-01T10:26:25.825766+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 178.63.100. ...
show more
2026-07-01T10:26:25.825766+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 178.63.100.238
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 08:07:57
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.63.100.238 (static.238.100.63.178.clients.y ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.100.238 (static.238.100.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 04:07:49.411258 2026] [security2:error] [pid 17585:tid 17585] [client 178.63.100.238:48378] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bigheartskitchen.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bigheartskitchen.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akTK1Y5gekTetiaIPFmcjgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-07-01 07:10:26
(3 hours ago)
Repeated WordPress login POSTs blocked by WAF (3 in 6h)
Brute-Force
Web App Attack
2026-07-01 06:56:43
(3 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
lostswordfish.com
2026-07-01 06:50:08
(3 hours ago)
Wordfence waf block on wp20190711M4
Web App Attack
🇨🇿
ptlab
2026-07-01 06:45:10
(3 hours ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇫🇷
masterguru
2026-07-01 06:37:30
(3 hours ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 178.63.100.238 (static.238.100.63.178.clients ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 178.63.100.238 (static.238.100.63.178.clients.your-server.de): 1 in the last 3600 secs (0-195)
show less
Hacking
🇦🇺
FireGuard Server
2026-07-01 06:35:06
(3 hours ago)
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=443
Port Scan
Hacking
🇩🇪
ger-stg-sifi1
2026-07-01 06:28:01
(4 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 06:24:58
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.63.100.238 (static.238.100.63.178.clients.y ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.100.238 (static.238.100.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 02:24:53.618857 2026] [security2:error] [pid 31846:tid 31846] [client 178.63.100.238:52414] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||diamondtrailerserv.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "diamondtrailerserv.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akSytdwLfrSikWWIjF-joQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
solution.it
2026-07-01 06:20:17
(4 hours ago)
[Wed Jul 01 08:20:16.666434 2026] [php7:error] [pid 46827:tid 46827] [client 178.63.100.238:39826] s ...
show more
[Wed Jul 01 08:20:16.666434 2026] [php7:error] [pid 46827:tid 46827] [client 178.63.100.238:39826] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇺🇸
integrantservices.com
2026-07-01 06:07:14
(4 hours ago)
(wordpress) Failed wordpress login from 178.63.100.238 (DE/Germany/static.238.100.63.178.clients.you ...
show more
(wordpress) Failed wordpress login from 178.63.100.238 (DE/Germany/static.238.100.63.178.clients.your-server.de)
show less
Brute-Force
🇬🇧
poundawebsiteltd
2026-07-01 06:02:08
(4 hours ago)
WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 178.63.100.238 - - [01/Jul/2026:07:02:00 +0100] ...
show more
WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 178.63.100.238 - - [01/Jul/2026:07:02:00 +0100] POST /wp-login.php HTTP/2.0 200 3654 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
show less
Web App Attack
🇺🇸
xxkodedxx
2026-07-01 06:00:32
(4 hours ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
Active: 05:59:39 UTC
Volume: 2 honeypot probe(s)
Bait taken: /wp-login.php
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-07-01 06:00:30
(4 hours ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack