🇺🇸
HJ5Ss4Ju
2026-10-27 11:17:26
(1 day ago)
Wordfence firewall block
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 19:37:51
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 188.191.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 15:37:43.268874 2026] [security2:error] [pid 28352:tid 28352] [client 188.191.112.110:2821 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.191.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 15:37:43.268874 2026] [security2:error] [pid 28352:tid 28352] [client 188.191.112.110:28218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||major33.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "major33.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "at-sB3NenRph0-fY4nw58QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
spamverify.com
2026-10-26 10:04:12
(2 days ago)
Honeypot Hit: WordPress Users
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
HJ5Ss4Ju
2026-10-26 04:17:27
(2 days ago)
Wordfence firewall block
Web App Attack
🇦🇺
aranguren.org
2026-10-25 04:34:14
(3 days ago)
188.191.112.110 - - [25/Oct/2026:15:34:11 +1100] "POST /wp-login.php HTTP/2.0" 404 45049 "https://life.luisaranguren.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537 ...
show more
188.191.112.110 - - [25/Oct/2026:15:34:11 +1100] "POST /wp-login.php HTTP/2.0" 404 45049 "https://life.luisaranguren.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_128_GCM_SHA256
188.191.112.110 - - [25/Oct/2026:15:34:13 +1100] "GET /wp-login.php HTTP/2.0" 404 45049 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_128_GCM_SHA256
...
show less
Web App Attack
2026-10-24 10:18:33
(4 days ago)
[ns41.kdns.gr] httpd-suspicious-path: sites=www.kkourelis.gr; logs=/var/log/httpd/domains/kkourelis.gr.log; samples=/?author=1&feed=rss2 | /?author=2&feed=rss2 | /?author=3&feed=rss2
Hacking
Web App Attack
🇫🇷
masterguru
2026-10-24 08:25:42
(4 days ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
🇲🇽
octageeks.com
2026-10-22 04:14:51
(6 days ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇺🇸
nationaleventpros.com
2026-10-20 17:03:34
(1 week ago)
WordPress login attempt
Brute-Force
🇫🇷
LRob
2026-10-18 05:13:40
(1 week ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-17 10:41:42
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 188.191.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:41:38.041244 2026] [security2:error] [pid 24211:tid 24233] [client 188.191.112.110:2754 ...
show more
(mod_security) mod_security (id:225170) triggered by 188.191.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:41:38.041244 2026] [security2:error] [pid 24211:tid 24233] [client 188.191.112.110:27545] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tomithai.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tomithai.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNQ4vpoI8xB5rpDjkcmggAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 08:40:23
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 188.191.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 04:40:14.861282 2026] [security2:error] [pid 2783:tid 2783] [client 188.191.112.110:27815] ...
show more
(mod_security) mod_security (id:225170) triggered by 188.191.112.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 04:40:14.861282 2026] [security2:error] [pid 2783:tid 2783] [client 188.191.112.110:27815] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||losbarbarosdelnorte.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "losbarbarosdelnorte.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atM0bgkqEovpHeQ4H2Cp9gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
