2026-07-06 09:33:00
(13 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇲🇽
octageeks.com
2026-07-06 04:14:33
(18 hours ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇬🇧
spamverify.com
2026-07-05 16:22:23
(1 day ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 03:14:42
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 23:14:35.636568 2026] [security2:error] [pid 7925:tid 7925] [client 190.92.174.125:51162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||inquisitivequincie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inquisitivequincie.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aknMGzG1RgreRa2A8vLM8gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 22:54:34
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 18:54:30.102864 2026] [security2:error] [pid 31529:tid 31529] [client 190.92.174.125:41612] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||internetnameregistration.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "internetnameregistration.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akmPJoauMvz1CkS2-HCurAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
SpamStopper
2026-07-04 14:40:42
(2 days ago)
Fail2Ban - WP Spoofing
Port Scan
Brute-Force
Web App Attack
🇩🇪
4server
2026-07-04 13:56:44
(2 days ago)
[SatJul0415:56:39.0242822026][security2:error][pid1569994:tid1570102][client190.92.174.125:0]ModSecu ...
show more
[SatJul0415:56:39.0242822026][security2:error][pid1569994:tid1570102][client190.92.174.125:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ipv6.gmint.ch\"][uri\"/xmlrpc.php\"][unique_id\"akkRF0g-BHt6y0QNcjtzvgAAAMI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
Hazzard
2026-07-04 10:23:34
(2 days ago)
(wordpress) Failed wordpress login from 190.92.174.125 (IN/India/Maharashtra/Navi Mumbai/s3739.bom1. ...
show more
(wordpress) Failed wordpress login from 190.92.174.125 (IN/India/Maharashtra/Navi Mumbai/s3739.bom1.stableserver.net/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-04 04:23:35
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:23:30.566059 2026] [security2:error] [pid 19797:tid 19797] [client 190.92.174.125:53966] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||staging.groovedoctors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staging.groovedoctors.com"] [uri "/wp-json/wp/v2/users/8"] [unique_id "akiKwtnD0O46Lo6GpO1LzAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 02:46:50
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:46:46.470284 2026] [security2:error] [pid 15993:tid 15993] [client 190.92.174.125:43178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||repair.cloudex.link|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "repair.cloudex.link"] [uri "/wp-json/wp/v2/users/7"] [unique_id "akh0Fn85xLDheOeH3vqQGgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 01:08:59
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 21:08:56.371196 2026] [security2:error] [pid 11868:tid 11944] [client 190.92.174.125:39440] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mtiminis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mtiminis.com"] [uri "/wp-json/wp/v2/users/4"] [unique_id "akhdKIeTVGVXls7GOrNLaAAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 21:57:52
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:57:46.263152 2026] [security2:error] [pid 2288:tid 2288] [client 190.92.174.125:59174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thepinman.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thepinman.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akgwWoAAuMVPSUREZRX21wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-03 20:07:34
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 19:04:44
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:04:38.823763 2026] [security2:error] [pid 3157:tid 3157] [client 190.92.174.125:35284] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||autodiscover.luisguacache.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "autodiscover.luisguacache.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akgHxr6fJ1U9FAXdRI1qtQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 14:56:15
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.92.174.125 (s3739.bom1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 10:56:11.830018 2026] [security2:error] [pid 21553:tid 21553] [client 190.92.174.125:43842] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.avaliantlife.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.avaliantlife.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akfNi7l5vUSL7tOII1zpmgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack