🇫🇷
solution.it
2026-08-31 12:00:35
(1 day ago)
[Mon Aug 31 14:00:33.974605 2026] [php7:error] [pid 3607890:tid 3607890] [client 37.60.241.155:45962 ...
show more
[Mon Aug 31 14:00:33.974605 2026] [php7:error] [pid 3607890:tid 3607890] [client 37.60.241.155:45962] script '/var/www/html/wp-login.php' not found or unable to stat
show less
Web App Attack
🇺🇸
etu brutus
2026-08-31 11:16:06
(1 day ago)
37.60.241.155 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
🇺🇸
kosada.com
2026-08-31 10:35:52
(1 day ago)
Web vulnerability probing: /wp-login.php
Web App Attack
🇫🇷
LRob
2026-08-31 09:20:39
(1 day ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users | 2026-08-31 09:20 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 08:50:31
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 37.60.241.155 (vmi1635381.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.60.241.155 (vmi1635381.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:50:26.630244 2026] [security2:error] [pid 25010:tid 25010] [client 37.60.241.155:49460] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lawrencehale.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lawrencehale.net"] [uri "/wp-json/wp/v2/users"] [unique_id "apVAUtwsitkkvLmDQzfGcgAAAAc"], referer: http://www.lawrencehale.net/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-08-31 08:26:47
(1 day ago)
37.60.241.155 - - [31/Aug/2026:02:26:47 -0600] "GET /wp-login.php HTTP/1.1" 301 487 "" "Mozilla/5.0 ...
show more
37.60.241.155 - - [31/Aug/2026:02:26:47 -0600] "GET /wp-login.php HTTP/1.1" 301 487 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
...
show less
Web App Attack
🇧🇪
voormedia
2026-08-31 06:46:47
(1 day ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇩🇪
Vegascosmetics
2026-08-31 06:41:41
(1 day ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-login\.php (Match: /wp-login.php)
show less
Hacking
Exploited Host
Web App Attack
🇺🇸
moppetto
2026-08-31 06:34:45
(1 day ago)
PHP probing; GET /wp-login.php
Bad Web Bot
Web App Attack
🇹🇷
oalver
2026-08-31 05:38:53
(1 day ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-31. Risk score: 30/100.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 05:20:59
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 37.60.241.155 (vmi1635381.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.60.241.155 (vmi1635381.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:20:55.319217 2026] [security2:error] [pid 1583:tid 1583] [client 37.60.241.155:39912] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theamarals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theamarals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apUPN5oAdRnXKtYa8lhKywAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 05:01:07
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 37.60.241.155 (vmi1635381.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.60.241.155 (vmi1635381.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:01:01.933067 2026] [security2:error] [pid 26795:tid 26909] [client 37.60.241.155:51842] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||asetiadi.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "asetiadi.net"] [uri "/wp-json/wp/v2/users"] [unique_id "apUKjcSNcQ19oT6WDznxeAAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 04:32:33
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 37.60.241.155 (vmi1635381.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.60.241.155 (vmi1635381.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:32:24.948191 2026] [security2:error] [pid 31987:tid 31987] [client 37.60.241.155:50484] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bethanpearce.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bethanpearce.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apUD2G6PlZkKULIZLumd0wAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-31 04:08:01
(1 day ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-08-31 02:37:41
(1 day ago)
Wordpress hacking attempt
Web App Attack