2026-10-02 06:46:15
(18 hours ago)
Failed Wordpress Logins
Web App Attack
🇬🇧
BRHosting
2026-10-01 00:42:02
(2 days ago)
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:50:23
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:50:20.211789 2026] [security2:error] [pid 514:tid 514] [client 2407:1c00:6100:7e00:::0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||avaliantlife.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "avaliantlife.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ary_PFoXENGAIvAIdnlkhQAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:00:38
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:00:31.731170 2026] [security2:error] [pid 1901:tid 1901] [client 2407:1c00:6100:7e00:::0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cloudex.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cloudex.click"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aryzjwYUCHso9oRhV4RSKgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
QT
2026-09-30 04:15:29
(2 days ago)
Unauthorised WordPress admin login attempted at 2026-09-30 14:15:21 +1000
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 02:38:29
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:38:21.765245 2026] [security2:error] [pid 16012:tid 16012] [client 2407:1c00:6100:7e00:::51788] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vespaitaliancafe.matteozacchino.dev|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vespaitaliancafe.matteozacchino.dev"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arx2HXiUYSxx3zw2GIPGPwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 23:11:42
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 19:11:35.357410 2026] [security2:error] [pid 28571:tid 28571] [client 2407:1c00:6100:7e00:::40594] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.edmontonareahomes.digitalracemedia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.edmontonareahomes.digitalracemedia.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arxFp8lc_YpiOqUH9EhDuQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-09-29 22:26:04
(3 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-09-29 21:29:55
(3 days ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇮🇹
VHosting
2026-09-29 20:35:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
club77
2026-09-29 20:32:09
(3 days ago)
2407:1c00:6100:7e00:: - - [30/Sep/2026:04:32:09 +0800] "POST /xmlrpc.php HTTP/2.0" 403 254 "-" "Mozi ...
show more
2407:1c00:6100:7e00:: - - [30/Sep/2026:04:32:09 +0800] "POST /xmlrpc.php HTTP/2.0" 403 254 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
...
show less
Web App Attack
2026-09-29 19:46:03
(3 days ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 18:50:47
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2407:1c00:6100:7e00:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:50:39.107226 2026] [security2:error] [pid 21242:tid 21242] [client 2407:1c00:6100:7e00:::59312] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fletcherdouglas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fletcherdouglas.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arwIfxq90fRzdAuCxgro6QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-29 18:41:28
(3 days ago)
[TueSep2920:41:24.2373672026][security2:error][pid2629256:tid2629383][client2407:1c00:6100:7e00:::0] ...
show more
[TueSep2920:41:24.2373672026][security2:error][pid2629256:tid2629383][client2407:1c00:6100:7e00:::0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"safeoncloud.ch\"][uri\"/xmlrpc.php\"][unique_id\"arwGVGfkmlngxbiM8q66ewAAANc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-29 17:26:56
(3 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
