🇩🇪
FeG Deutschland
2026-07-03 14:57:23
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 06:31:52
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 185.104.44.167 (business-90.default-host.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 185.104.44.167 (business-90.default-host.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:31:48.140858 2026] [security2:error] [pid 9670:tid 9670] [client 185.104.44.167:62326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nbreen.nancybcatering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nbreen.nancybcatering.com"] [uri "/wp-json/wp/v2/users/6"] [unique_id "akdXVAfEGFnWskxzjYLxQgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-03 04:21:57
(16 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
LRob
2026-07-03 02:33:59
(18 hours ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇩🇪
neckaralb-admin.de
2026-07-03 02:07:58
(18 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
nyt
2026-07-03 01:50:49
(19 hours ago)
Repeated WordPress login POSTs blocked by WAF (3 in 6h)
Brute-Force
Web App Attack
2026-07-03 01:34:00
(19 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-03 00:14:53
(20 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 23:32:07
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 185.104.44.167 (business-90.default-host.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 185.104.44.167 (business-90.default-host.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:32:03.097547 2026] [security2:error] [pid 22171:tid 22171] [client 185.104.44.167:60248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||konahawaii.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "konahawaii.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akb087tamvileeJptBUWGwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 22:07:30
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 185.104.44.167 (business-90.default-host.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 185.104.44.167 (business-90.default-host.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:07:25.093718 2026] [security2:error] [pid 11961:tid 11961] [client 185.104.44.167:9326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||guldunyayayinlari.handankoc.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "guldunyayayinlari.handankoc.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akbhHVRhYKNbo8UeqtMt5QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
solution.it
2026-07-02 20:29:39
(1 day ago)
[Thu Jul 02 22:29:38.799847 2026] [php7:error] [pid 507270:tid 507270] [client 185.104.44.167:61510] ...
show more
[Thu Jul 02 22:29:38.799847 2026] [php7:error] [pid 507270:tid 507270] [client 185.104.44.167:61510] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇩🇪
Ba-Yu
2026-07-02 15:46:06
(1 day ago)
WordPress bruteforce
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇮🇩
origrata
2026-07-02 15:04:58
(1 day ago)
[OGWAF] brute_force attack blocked | severity: high | POST /wp-login.php | UA: Mozilla/5.0 (X11; Lin ...
show more
[OGWAF] brute_force attack blocked | severity: high | POST /wp-login.php | UA: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
show less
Brute-Force
Hacking
🇫🇷
ELYAZ
2026-07-02 14:53:20
(1 day ago)
(y4) Failed scan -byebye- from 185.104.44.167 (UA/Ukraine/business-90.default-host.net): (CF_ENABLE ...
show more
(y4) Failed scan -byebye- from 185.104.44.167 (UA/Ukraine/business-90.default-host.net): (CF_ENABLE)
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-02 13:01:12
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 185.104.44.167 (business-90.default-host.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 185.104.44.167 (business-90.default-host.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 09:01:06.516591 2026] [security2:error] [pid 22339:tid 22339] [client 185.104.44.167:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||local639.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "local639.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akZhErvAu4BmtJ1FrLKoLwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack