🇺🇸
octageeks.com
2026-02-28 05:08:45
(4 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇳🇱
EGP Abuse Dept
2026-02-26 09:59:25
(4 months ago)
Scanning for web/db/file exploits on www.uhuw.nl
SQL Injection
Bad Web Bot
Web App Attack
2026-02-26 06:08:50
(4 months ago)
<jail> banned by fail2ban
Brute-Force
Web App Attack
🇺🇸
octageeks.com
2026-02-26 05:06:56
(4 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
TPI-Abuse
2026-02-26 02:18:24
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 193.124.16.137 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.124.16.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 21:18:19.508606 2026] [security2:error] [pid 21533:tid 21533] [client 193.124.16.137:22709] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lmga.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lmga.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ-ta3S5vtosNwtdekjhuQAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-26 01:49:59
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 193.124.16.137 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.124.16.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 20:49:52.329566 2026] [security2:error] [pid 3764:tid 3764] [client 193.124.16.137:28958] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manaplas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manaplas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ-mwAu4qrZ3x_2IQxI2FQAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-02-26 00:21:38
(4 months ago)
193.124.16.137 - - [26/Feb/2026:02:21:35 +0200] "GET /wp-login.php HTTP/1.1" 404 2694 "https://www.g ...
show more
193.124.16.137 - - [26/Feb/2026:02:21:35 +0200] "GET /wp-login.php HTTP/1.1" 404 2694 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
193.124.16.137 - - [26/Feb/2026:02:21:37 +0200] "GET /wp-login.php HTTP/1.1" 404 2694 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇬🇧
Bytemark
2026-02-26 00:17:23
(4 months ago)
193.124.16.137 - - [26/Feb/2026:00:01:29 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.goo ...
show more
193.124.16.137 - - [26/Feb/2026:00:01:29 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
193.124.16.137 - - [26/Feb/2026:00:17:23 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
193.124.16.137 - - [26/Feb/2026:00:17:23 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇳🇱
lid3rc
2026-02-25 22:25:36
(4 months ago)
According to the AbuseIPDB risk analysis, the IP address is too high risk.
Web App Attack
🇧🇪
voormedia
2026-02-25 22:15:04
(4 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
2026-02-25 19:20:52
(4 months ago)
ModSecurity rejected a query
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-02-25 18:31:18
(4 months ago)
[Wed Feb 25 19:31:17.718577 2026] [proxy_fcgi:error] [pid 2368696:tid 2369336] [remote 193.124.16.13 ...
show more
[Wed Feb 25 19:31:17.718577 2026] [proxy_fcgi:error] [pid 2368696:tid 2369336] [remote 193.124.16.137:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com
[Wed Feb 25 19:31:17.969470 2026] [proxy_fcgi:error] [pid 2368685:tid 2368876] [remote 193.124.16.137:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com
...
show less
Hacking
Web App Attack
🇺🇸
ANTI SCANNER
2026-02-25 17:53:14
(4 months ago)
Scanner : /wp-login.php
Web Spam
2026-02-25 17:37:30
(4 months ago)
Probing for common web apps (e.g. wordpress) or invalid web tech (e.g. Querying for PHP services on ...
show more
Probing for common web apps (e.g. wordpress) or invalid web tech (e.g. Querying for PHP services on a non-PHP site) .php
show less
Web App Attack
🇺🇸
ph
2026-02-25 16:55:03
(4 months ago)
Bad web bot attempting to run wp-login.php on non-WP site
Hacking
Bad Web Bot
Web App Attack