2026-09-01 18:46:24
(1 day ago)
Failed Wordpress Logins
Web App Attack
🇪🇸
alferez
2026-09-01 04:23:10
(1 day ago)
Multiple WP Login Attack
Hacking
Exploited Host
Web App Attack
🇩🇪
london2038.com
2026-09-01 02:16:44
(2 days ago)
Probing for exploits
2402:1f00:8000:315::1 - - [01/Sep/2026:04:16:38 +0200] "GET /wp-login.php HTTP/ ...
show more
Probing for exploits
2402:1f00:8000:315::1 - - [01/Sep/2026:04:16:38 +0200] "GET /wp-login.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
2402:1f00:8000:315::1 - - [01/Sep/2026:04:16:39 +0200] "POST /wp-login.php HTTP/2.0" 301 0 "https://v97746.<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-09-01 00:32:05
(2 days ago)
WordPress login brute-force | path: /wp-login.php | 2026-09-01 00:32 UTC
Brute-Force
Web App Attack
🇩🇪
Prodscape
2026-08-31 22:35:24
(2 days ago)
(WPLOGIN) WP Login Attack 2402:1f00:8000:315::1 (Unknown): 5 in the last 86400 secs; Ports: *; Direc ...
show more
(WPLOGIN) WP Login Attack 2402:1f00:8000:315::1 (Unknown): 5 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER
show less
Port Scan
🇩🇪
LRob
2026-08-31 15:34:35
(2 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-login.php | 2026-08-31 15:34 UTC
show less
Hacking
Web App Attack
🇬🇧
BRHosting
2026-08-31 15:01:02
(2 days ago)
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
Brute-Force
Web App Attack
🇫🇷
LRob
2026-08-31 14:29:43
(2 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users/me | 2026-08-31 14:29 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 14:12:02
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2402:1f00:8000:315::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:1f00:8000:315::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:11:50.152508 2026] [security2:error] [pid 31599:tid 31599] [client 2402:1f00:8000:315::1:35200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||riedmannfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "riedmannfamily.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apWLpm38BK4A9Do0utAlDgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 13:42:03
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2402:1f00:8000:315::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:1f00:8000:315::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:41:57.282314 2026] [security2:error] [pid 32318:tid 32318] [client 2402:1f00:8000:315::1:36508] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kporterdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kporterdesign.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apWEpaQ6jPEpUQRBOuex-gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Mehmet_The_Script_Kiddie
2026-08-31 13:30:08
(2 days ago)
CloudFlare WAF REPORT: /wp-login.php
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 13:13:39
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2402:1f00:8000:315::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:1f00:8000:315::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:13:31.743701 2026] [security2:error] [pid 6678:tid 6678] [client 2402:1f00:8000:315::1:60122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cosplayculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cosplayculture.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apV9-1ZyvquntK92SuTvnQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
karger
2026-08-31 12:56:03
(2 days ago)
Wordpress attack - soft filter
Brute-Force
Web App Attack
🇩🇪
wpadm4
2026-08-31 11:09:39
(2 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 10:54:56
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2402:1f00:8000:315::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:1f00:8000:315::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:54:47.103693 2026] [security2:error] [pid 3720756:tid 3720791] [client 2402:1f00:8000:315::1:48660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||condo.management|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "condo.management"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apVddyXDYD09BveEjkjC7wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack