🇫🇷
tecnicorioja
2026-07-06 22:01:33
(1 day ago)
wp-login attack [06/Jul/2026:06:48:11
Brute-Force
Web App Attack
🇩🇪
neckaralb-admin.de
2026-07-06 04:32:07
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇲🇽
octageeks.com
2026-07-06 04:18:55
(1 day ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇩🇪
marten_o
2026-07-06 00:46:25
(1 day ago)
198.135.50.79 - - [06/Jul/2026:02:46:24 +0200] "GET /wp-login.php HTTP/2.0" 200 4138 "-" "Mozilla/5. ...
show more
198.135.50.79 - - [06/Jul/2026:02:46:24 +0200] "GET /wp-login.php HTTP/2.0" 200 4138 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 154 4483
...
show less
Bad Web Bot
Web App Attack
2026-07-05 17:53:53
(2 days ago)
[Sun Jul 05 18:52:28.017808 2026] [authz_core:error] [pid 44585:tid 44729] [client 198.135.50.79:503 ...
show more
[Sun Jul 05 18:52:28.017808 2026] [authz_core:error] [pid 44585:tid 44729] [client 198.135.50.79:50314] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php
[Sun Jul 05 18:52:31.562322 2026] [authz_core:error] [pid 44585:tid 44739] [client 198.135.50.79:50314] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://pre.cimt-precision.de/wp-login.php
[Sun Jul 05 19:53:51.982017 2026] [authz_core:error] [pid 44584:tid 44744] [client 198.135.50.79:53544] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php
[Sun Jul 05 19:53:52.243995 2026] [authz_core:error] [pid 44584:tid 44723] [client 198.135.50.79:53544] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://pre.cimt-precision.de/wp-login.php
...
show less
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-07-05 04:14:05
(2 days ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇩🇪
neckaralb-admin.de
2026-07-04 13:14:59
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-07-04 11:04:44
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-04 10:21:37
(3 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 02:24:03
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:23:59.056155 2026] [security2:error] [pid 1750:tid 1750] [client 198.135.50.79:36438] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vrevgaming.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vrevgaming.net"] [uri "/wp-json/wp/v2/users/5"] [unique_id "akhuv-FYLByabjofa9RauwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 00:20:41
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:20:35.748405 2026] [security2:error] [pid 27082:tid 27082] [client 198.135.50.79:54464] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||proyectando.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "proyectando.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akhR03iH843FiskPd3IfGQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 21:36:09
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:36:03.974270 2026] [security2:error] [pid 8106:tid 8106] [client 198.135.50.79:40764] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||anchor07.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "anchor07.com"] [uri "/wp-json/wp/v2/users/4"] [unique_id "akgrQ4Dh_RMpha7F8AHQaAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 19:49:01
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:48:55.305085 2026] [security2:error] [pid 3648:tid 3648] [client 198.135.50.79:52734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||k2servicesinc.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k2servicesinc.net"] [uri "/wp-json/wp/v2/users/4"] [unique_id "akgSJ_HpedHAUMx6onfMPwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
stinpriza
2026-07-03 15:51:39
(4 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 15:35:06
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 198.135.50.79 (emerald6.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 11:35:00.895488 2026] [security2:error] [pid 10155:tid 10155] [client 198.135.50.79:58364] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||puckerbikinis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puckerbikinis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akfWpJIdlQFjAWJ9CsHaFQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack