🇩🇪
ghostwarriors
2026-08-31 11:20:11
(29 minutes ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-08-31 11:09:38
(39 minutes ago)
216.10.243.55 - - [31/Aug/2026:10:59:06 +0200] "GET /wp-login.php HTTP/1.1" 301 578 "" "Mozilla/5.0 ...
show more
216.10.243.55 - - [31/Aug/2026:10:59:06 +0200] "GET /wp-login.php HTTP/1.1" 301 578 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
216.10.243.55 - - [31/Aug/2026:10:59:06 +0200] "GET /wp-login.php HTTP/2.0" 404 341 "http://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
216.10.243.55 - - [31/Aug/2026:07:45:25 +0200] "GET /wp-login.php HTTP/1.1" 301 590 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
216.10.243.55 - - [31/Aug/2026:07:45:26 +0200] "GET /wp-login.php HTTP/2.0" 404 341 "http://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
216.10.243.55 - - [31/Aug/2026:13:09:36 +0200] "GET /wp-login.php HTTP/1.1" 301 578 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
216.10.243.55 - - [31/Aug/2026:13:09:36 +0200] "GET /wp-login.php HTTP/2.0" 404 341 "http://[site]
show less
Web App Attack
Hacking
🇩🇪
ger-stg-sifi1
2026-08-31 07:22:39
(4 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 06:44:36
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:44:32.960342 2026] [security2:error] [pid 3599577:tid 3599638] [client 216.10.243.55:36822] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rubenluis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rubenluis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apUi0Cj3D5CvGgHFUEyBggAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2026-08-31 06:23:32
(5 hours ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 06:12:44
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:12:40.145594 2026] [security2:error] [pid 30067:tid 30067] [client 216.10.243.55:40394] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||barigby.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barigby.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apUbWDYu2hZ3pX5hJKcVVgAAAAI"], referer: http://barigby.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
eposs-it.de
2026-08-31 05:45:23
(6 hours ago)
Blocked by os-abuseipdb; 12 hits, proto=tcp, ports=443,80
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-08-31 02:18:36
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 22:18:31.035887 2026] [security2:error] [pid 11187:tid 11187] [client 216.10.243.55:44922] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||prostar.industries|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prostar.industries"] [uri "/wp-json/wp/v2/users"] [unique_id "apTkdzJKwDtwXJBXEFS-MgAAAAk"], referer: http://kuns.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-31 02:05:02
(9 hours ago)
wp admin page access attempt
...
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 01:11:11
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 21:11:06.059950 2026] [security2:error] [pid 14074:tid 14074] [client 216.10.243.55:54852] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bickleton.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bickleton.org"] [uri "/wp-json/wp/v2/users"] [unique_id "apTUql43rV1rNgwDhpqS-wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 00:27:19
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 216.10.243.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 20:27:11.628261 2026] [security2:error] [pid 30897:tid 30908] [client 216.10.243.55:39792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||inal.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inal.org"] [uri "/wp-json/wp/v2/users"] [unique_id "apTKX3e-ksrdeZZoNy2USAAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-08-30 22:08:42
(13 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
ipblock.com
2026-08-30 21:06:00
(14 hours ago)
IPBlock protected site ID [669-fx].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
jcbriar
2026-08-30 20:38:23
(15 hours ago)
Searching for vulnerable scripts
Hacking
Web App Attack
2026-08-30 20:38:02
(15 hours ago)
Bot / scanning and/or hacking attempts: [1/1] done, GET /wp-login.php HTTP/2.0
Hacking
Web App Attack