🇨🇭
Mario Bretscher
2026-06-20 09:28:41
(39 minutes ago)
Jun 20 11:26:38 beat-band.ch Cerber(beat-band.ch)[3160900]: Authentication failure for 61622 from 17 ...
show more
Jun 20 11:26:38 beat-band.ch Cerber(beat-band.ch)[3160900]: Authentication failure for 61622 from 179.173.70.5
Jun 20 11:28:39 beat-band.ch Cerber(beat-band.ch)[3158281]: Authentication failure for beat-band.ch from 179.173.70.5
...
show less
Web Spam
🇯🇵
Valhalla
2026-06-20 02:49:11
(7 hours ago)
/xmlrpc.php
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 13:15:20
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 179.173.70.5 (179-173-70-5.user.vivozap.com.br) ...
show more
(mod_security) mod_security (id:225170) triggered by 179.173.70.5 (179-173-70-5.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:15:12.751314 2026] [security2:error] [pid 18951:tid 18951] [client 179.173.70.5:53776] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||alpha-hk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alpha-hk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVA4N-j-3CnRJ2kYwfFhQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-06-19 12:14:02
(21 hours ago)
trying wp-login.php/xmlrpc.php 31 times in 1 minutes
Brute-Force
Web App Attack
🇺🇸
interbiznw.com
2026-06-19 10:41:16
(23 hours ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇩🇰
SaltySoftworks
2026-06-19 09:09:32
(1 day ago)
Page: /xmlrpc.php
Hacking
Web App Attack
🇺🇸
OceanTreasure
2026-06-19 06:05:04
(1 day ago)
tcp/443; WordPress XML-RPC brute force attempt: "POST /xmlrpc.php" @ 2026-06-19T06:01:40Z [proxy]
Brute-Force
🇩🇪
joharikop
2026-06-19 06:03:45
(1 day ago)
Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes ...
show more
Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes jail.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 04:01:13
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 179.173.70.5 (179-173-70-5.user.vivozap.com.br) ...
show more
(mod_security) mod_security (id:225170) triggered by 179.173.70.5 (179-173-70-5.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 00:01:05.691208 2026] [security2:error] [pid 29684:tid 29684] [client 179.173.70.5:60968] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jennyfiore.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jennyfiore.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajS_ARTj8MtBHmjnXPfE2AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-18 14:00:57
(1 day ago)
[ThuJun1816:00:54.9311962026][security2:error][pid1010736:tid1010751][client179.173.70.5:0]ModSecuri ...
show more
[ThuJun1816:00:54.9311962026][security2:error][pid1010736:tid1010751][client179.173.70.5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"risanamento-funghi-muffa.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajP6FkCpjhkKlxNutfebHgAAAQw\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-06-18 05:39:45
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
🇳🇱
wlt-blocker
2026-06-18 03:08:37
(2 days ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 00:48:25
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 179.173.70.5 (179-173-70-5.user.vivozap.com.br) ...
show more
(mod_security) mod_security (id:225170) triggered by 179.173.70.5 (179-173-70-5.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 20:48:20.187816 2026] [security2:error] [pid 28246:tid 28246] [client 179.173.70.5:52456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||495metro.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "495metro.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajNAVLAiymP631RJRZmVjAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 22:51:44
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 179.173.70.5 (179-173-70-5.user.vivozap.com.br) ...
show more
(mod_security) mod_security (id:225170) triggered by 179.173.70.5 (179-173-70-5.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 18:51:40.849903 2026] [security2:error] [pid 13835:tid 13835] [client 179.173.70.5:57429] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||opticasprisma.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "opticasprisma.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajHTfJs55m-R8t9ePZIEGQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-16 13:45:38
(3 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack