🇺🇸
Mundo Bueno
2026-08-28 03:38:30
(4 weeks ago)
[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php | Pays: KZ | UA: Mozilla/5.0 (Windows NT 10. ...
show more
[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php | Pays: KZ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0
show less
Hacking
Web App Attack
🇺🇸
lostswordfish.com
2026-07-13 14:40:06
(2 months ago)
Wordfence waf block on 1105merrystreet
Web App Attack
🇫🇮
6kilowatti
2026-06-29 15:31:15
(2 months ago)
2a00:5da0:1000:1::3222 - - [29/Jun/2026:18:31:14 +0300] "POST /xmlrpc.php HTTP/1.1" 403 75 "-" "Mozi ...
show more
2a00:5da0:1000:1::3222 - - [29/Jun/2026:18:31:14 +0300] "POST /xmlrpc.php HTTP/1.1" 403 75 "-" "Mozilla/5.0 (Windows NT 10.0; rv:142.0) Gecko/20100101 Firefox/142.0"
2a00:5da0:1000:1::3222 - [29/Jun/2026:18:31:14 +0300] "POST /xmlrpc.php HTTP/1.1" 403 8192 "-" "Mozilla/5.0 (Windows NT 10.0; rv:142.0) Gecko/20100101 Firefox/142.0"
...
show less
Web App Attack
2026-06-27 12:15:52
(2 months ago)
Web attack blocked by Wordfence on www.charlesquaedvlieg.nl (1 hit). Reported by CRMON.
Web App Attack
🇩🇪
LRob
2026-06-26 06:30:06
(2 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-06-24 22:30:04
(3 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 17:29:55
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 13:29:47.755133 2026] [security2:error] [pid 27039:tid 27039] [client 2a00:5da0:1000:1::3222:44032] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.j3pr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.j3pr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajrCixFo7_RNMW3bmK0sZgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 13:31:42
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 09:31:36.731308 2026] [security2:error] [pid 5856:tid 5856] [client 2a00:5da0:1000:1::3222:41602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.texascottagebakers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.texascottagebakers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajqKuJgy_0Elt7uF8cAUUQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-23 13:14:27
(3 months ago)
(wp_login_try) srv104 WP Login Attempt 2a00:5da0:1000:1::3222 (KZ/Kazakhstan/-): 10 in the last 3600 ...
show more
(wp_login_try) srv104 WP Login Attempt 2a00:5da0:1000:1::3222 (KZ/Kazakhstan/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 10:40:09
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 06:39:58.247291 2026] [security2:error] [pid 8427:tid 8427] [client 2a00:5da0:1000:1::3222:49758] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ferrarapanfitness.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ferrarapanfitness.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpift7b8mm8t1RmVT7VrwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 14:33:22
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 10:33:17.645394 2026] [security2:error] [pid 30784:tid 30784] [client 2a00:5da0:1000:1::3222:52334] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rddeckerphotography.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rddeckerphotography.com"] [uri "/blog/wp-json/wp/v2/users"] [unique_id "ajlHrcHwZDmu02EbazYGBwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 18:56:35
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 14:56:30.697070 2026] [security2:error] [pid 18536:tid 18536] [client 2a00:5da0:1000:1::3222:53468] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.btccasting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.btccasting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajgz3hPz_o1PNlNuH6CQzgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 07:12:52
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:12:44.117315 2026] [security2:error] [pid 22557:tid 22557] [client 2a00:5da0:1000:1::3222:34946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.garantaconsulting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.garantaconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai0C7I6CgCLviTj9RPM03gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 13:22:49
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 09:22:43.007170 2026] [security2:error] [pid 28443:tid 28443] [client 2a00:5da0:1000:1::3222:45124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jaragoodrich.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jaragoodrich.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiQfIy4izUrUrH5iajh5NgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 06:59:48
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a00:5da0:1000:1::3222 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 02:59:38.901695 2026] [security2:error] [pid 6804:tid 6804] [client 2a00:5da0:1000:1::3222:58166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ideaofauniversity.website|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/wp/v2/users"] [unique_id "aiPFWmMMV5YJGmlnhrQAVwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
