2026-05-19 23:45:08
(4 weeks ago)
HACK
Brute-Force
🇩🇪
R.G.
2026-05-19 02:32:08
(4 weeks ago)
(XMLRPCorWHATEVER) Get lost please 37.18.242.1 (ES/Spain/-): 3 in the last 900 secs; Ports: *; Direc ...
show more
(XMLRPCorWHATEVER) Get lost please 37.18.242.1 (ES/Spain/-): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 12:08:20
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 37.18.242.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 37.18.242.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 08:08:13.358006 2026] [security2:error] [pid 14207:tid 14207] [client 37.18.242.1:37574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||celebritybikinigossip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "celebritybikinigossip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agsBLVCPzHOqIjFFY6n3CQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 06:26:07
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 37.18.242.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 37.18.242.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 02:26:00.578419 2026] [security2:error] [pid 29587:tid 29587] [client 37.18.242.1:56362] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lasertherapyoc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lasertherapyoc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agqw-I7WbxKYEYnwGq_B2wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 02:48:45
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 37.18.242.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 37.18.242.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 22:48:38.689573 2026] [security2:error] [pid 8909:tid 8909] [client 37.18.242.1:39810] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.theamarals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.theamarals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agp-Bq01ViubpTk1vKlMxgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-05-17 21:08:13
(4 weeks ago)
(wp_login_try) srv103 WP Login Attempt 37.18.242.1 (ES/Spain/-): 10 in the last 3600 secs; Ports: *; ...
show more
(wp_login_try) srv103 WP Login Attempt 37.18.242.1 (ES/Spain/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Site.eu
2026-05-17 09:03:36
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
R.G.
2026-05-17 04:34:43
(1 month ago)
(XMLRPCorWHATEVER) Get lost please 37.18.242.1 (ES/Spain/-): 3 in the last 900 secs; Ports: *; Direc ...
show more
(XMLRPCorWHATEVER) Get lost please 37.18.242.1 (ES/Spain/-): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇩🇪
rh24
2026-05-16 15:13:31
(1 month ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 37.18.242.1 (ES/Spain/-): (CF_ENABLE)
Brute-Force
🇳🇱
Site.eu
2026-05-16 08:20:34
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
FeG Deutschland
2026-05-16 06:29:02
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇧🇷
SOC PR
2026-05-15 08:23:07
(1 month ago)
IPS: WordPress REST API Plugin Information Disclosure.
Hacking
🇧🇪
taivas.nl
2026-05-15 07:02:10
(1 month ago)
Bad_requests
Bad Web Bot
🇺🇸
octageeks.com
2026-05-15 04:06:46
(1 month ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇩🇪
LRob.fr
2026-05-14 22:45:11
(1 month ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot