2026-08-30 02:46:27
(19 hours ago)
Failed Wordpress Logins
Web App Attack
🇲🇽
octageeks.com
2026-08-29 04:34:33
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-08-28 22:01:40
(2 days ago)
Network service scanning detected by FortiGate; source quarantined.
Port Scan
2026-08-28 21:30:06
(2 days ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, [2/2] done, POST /wp-login.php H ...
show more
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, [2/2] done, POST /wp-login.php HTTP/2.0
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 21:26:31
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 17:26:26.992449 2026] [security2:error] [pid 17324:tid 17324] [client 217.160.89.106:51724] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||egelfitness.nl|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "egelfitness.nl"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apH9ArY99-7Ue2jqs3B4UwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-08-28 21:14:23
(2 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
tentwentyfour
2026-08-28 19:34:25
(2 days ago)
Blocked for brute-forcing WordPress log-in
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 19:23:03
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:22:58.299595 2026] [security2:error] [pid 22123:tid 22123] [client 217.160.89.106:39836] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||whiterapperz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whiterapperz.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apHgEjlHpZljW7_m-PdpSwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-08-28 19:16:50
(2 days ago)
(wplogin) WordPress login brute-force 217.160.89.106 (DE/Germany/-): 5 in the last 300 secs
Brute-Force
🇩🇪
neckaralb-admin.de
2026-08-28 19:07:14
(2 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 18:58:47
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:58:41.463853 2026] [security2:error] [pid 25032:tid 25047] [client 217.160.89.106:50004] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||peterhansenranch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peterhansenranch.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apHaYcfICwt5t4Q3EDTtCQAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 18:24:10
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:24:04.789140 2026] [security2:error] [pid 11545:tid 11545] [client 217.160.89.106:50938] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cosplayculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cosplayculture.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apHSRCSXKqTSRA_o82qxxwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-08-28 18:22:52
(2 days ago)
Multiple WP Login Attack
Hacking
Exploited Host
Web App Attack
🇩🇪
DocNetzwerk
2026-08-28 18:22:00
(2 days ago)
(wordpress) Failed wordpress login from 217.160.89.106 (DE/Germany/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-08-28 17:42:17
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 217.160.89.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:42:10.792484 2026] [security2:error] [pid 11754:tid 11754] [client 217.160.89.106:45270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.sbip.loneoakhoney.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sbip.loneoakhoney.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apHIcrHUwdIqDk3YxxmCKQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
