🇲🇽
octageeks.com
2026-07-10 04:20:54
(15 hours ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
lostswordfish.com
2026-07-09 19:48:04
(1 day ago)
Wordfence waf block on parsol
Web App Attack
2026-07-09 18:16:08
(1 day ago)
Web attack blocked by Wordfence on limburgsekunstkring.nl (1 hit). Reported by CRMON.
Web App Attack
🇮🇩
zam
2026-07-09 14:53:10
(1 day ago)
197.221.14.188 - - [09/Jul/2026:14:53:08 +0000] "POST /wp-login.php HTTP/1.1" 404 81174
Web App Attack
🇺🇸
dtorrer
2026-07-09 13:26:19
(1 day ago)
Brute-force general attack.
Brute-Force
🇬🇷
setupgr
2026-07-09 11:48:30
(1 day ago)
(wplogin_block) Blocked WP-Login Access Attempt 197.221.14.188 (ZA/South Africa/Western Cape/Cape To ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 197.221.14.188 (ZA/South Africa/Western Cape/Cape Town (Rosendal)/-/[AS37153 xneelo]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 197.221.14.188 - - [09/Jul/2026:14:38:14 +0300] "POST /wp-login.php HTTP/1.1" 200 3138 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.43 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0"
show less
Port Scan
🇳🇱
maxxsense
2026-05-12 07:10:41
(1 month ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 197.221.14.188 (www33.cpt4.host-h.net)
Brute-Force
🇺🇸
TPI-Abuse
2026-05-12 04:44:36
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 197.221.14.188 (www33.cpt4.host-h.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 197.221.14.188 (www33.cpt4.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 00:44:29.803222 2026] [security2:error] [pid 32541:tid 32554] [client 197.221.14.188:52828] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||northtexaslive.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "northtexaslive.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agKwLVifu0yHJzoEf6bNkgAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-05-12 04:06:17
(1 month ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 01:19:27
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 197.221.14.188 (www33.cpt4.host-h.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 197.221.14.188 (www33.cpt4.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 21:19:23.546019 2026] [security2:error] [pid 15818:tid 15818] [client 197.221.14.188:52214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dalessalesandservice.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dalessalesandservice.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agKAG8KrPHdnTmMf0MGK-AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-05-11 20:45:08
(1 month ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇩🇪
FeG Deutschland
2026-05-11 17:25:09
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 14:58:20
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 197.221.14.188 (www33.cpt4.host-h.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 197.221.14.188 (www33.cpt4.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 10:58:15.586763 2026] [security2:error] [pid 23102:tid 23102] [client 197.221.14.188:60892] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.glendaleheritage.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.glendaleheritage.org"] [uri "/glendale/wp-json/wp/v2/users"] [unique_id "agHuh_0GI3ji7SGFVk9WwwAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-05-11 09:05:33
(1 month ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 07:17:49
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 197.221.14.188 (www33.cpt4.host-h.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 197.221.14.188 (www33.cpt4.host-h.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 03:17:41.414606 2026] [security2:error] [pid 4959:tid 4959] [client 197.221.14.188:58474] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||peterjohnsonauthor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peterjohnsonauthor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agGClavxG_O9FSEAmMWLlwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack