🇩🇪
BlueWire Hosting
2026-10-11 20:06:08
(4 minutes ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
2026-10-11 16:09:53
(4 hours ago)
2026-10-11T16:09:53.060486+00:00 instance-20260804-1025 wordpress(trademarks4all.com)[230398]: XML-R ...
show more
2026-10-11T16:09:53.060486+00:00 instance-20260804-1025 wordpress(trademarks4all.com)[230398]: XML-RPC authentication attempt for unknown user tm4all:///REST API from 2a01:4f9:6b:3060::2
...
show less
Web App Attack
🇳🇱
ipoac.nl
2026-10-11 15:21:51
(4 hours ago)
-:443 2a01:4f9:6b:3060::2 - - [11/Oct/2026:17:21:49 +0200] - "GET /wp-admin/ HTTP/1.1" 302 6321 "-" ...
show more
-:443 2a01:4f9:6b:3060::2 - - [11/Oct/2026:17:21:49 +0200] - "GET /wp-admin/ HTTP/1.1" 302 6321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-11 15:02:48
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 11:02:43.489837 2026] [security2:error] [pid 17291:tid 17390] [client 2a01:4f9:6b:3060::2:47124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maroontribe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maroontribe.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asulE-G7LR9EB-Q2Wqh5JgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 14:21:29
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 10:21:21.784399 2026] [security2:error] [pid 1250:tid 1250] [client 2a01:4f9:6b:3060::2:40550] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||americanacademyofteachersofsinging.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "americanacademyofteachersofsinging.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asubYRAU6KearbknZMRY5AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-10-11 11:46:11
(8 hours ago)
(PERMBLOCK) 2a01:4f9:6b:3060::2 (FI/Finland/Uusimaa/Helsinki/-/[redacted]) has had more than 4 temp ...
show more
(PERMBLOCK) 2a01:4f9:6b:3060::2 (FI/Finland/Uusimaa/Helsinki/-/[redacted]) has had more than 4 temp blocks
show less
Hacking
🇩🇪
dbmwebdesign
2026-10-11 11:15:15
(8 hours ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇺🇸
TPI-Abuse
2026-10-11 11:08:53
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:08:45.925260 2026] [security2:error] [pid 12876:tid 12876] [client 2a01:4f9:6b:3060::2:57942] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zacharypowers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zacharypowers.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "astuPXgflVBC1Qxhj4LyTgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 10:36:41
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 06:36:37.518853 2026] [security2:error] [pid 10754:tid 10754] [client 2a01:4f9:6b:3060::2:33910] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kinderland-preschool.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kinderland-preschool.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "astmtf5JjH_YCdU08ivycQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-11 10:33:20
(9 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇷
Yepngo
2026-10-11 10:03:07
(10 hours ago)
2a01:4f9:6b:3060::2 - - [11/Oct/2026:12:03:07 +0200] "POST /wp-login.php HTTP/2.0" 200 12504 "https: ...
show more
2a01:4f9:6b:3060::2 - - [11/Oct/2026:12:03:07 +0200] "POST /wp-login.php HTTP/2.0" 200 12504 "https://www.yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 08:35:26
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 04:35:19.278036 2026] [security2:error] [pid 32268:tid 32268] [client 2a01:4f9:6b:3060::2:46806] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thorndikestudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thorndikestudio.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "astKRyBTioKdIZiOUd8tfQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 07:47:12
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:47:06.507032 2026] [security2:error] [pid 31128:tid 31128] [client 2a01:4f9:6b:3060::2:43174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.plazahacienda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.plazahacienda.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ass--j5dBxdGANnQ6aXTxAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 07:12:56
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:12:51.759839 2026] [security2:error] [pid 5019:tid 5019] [client 2a01:4f9:6b:3060::2:49948] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fgrotary.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fgrotary.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ass28xE4cGDH_bzuY_MJDAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 06:46:29
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:6b:3060::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 02:46:20.925888 2026] [security2:error] [pid 29770:tid 29770] [client 2a01:4f9:6b:3060::2:44504] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bigislandhawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bigislandhawaiirealty.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asswvAArjmmjmrjLkyiXEgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
