🇲🇽
octageeks.com
2026-09-18 04:09:20
(23 hours ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-18 00:20:11
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-17 22:23:09
(1 day ago)
Brute-Force
Web App Attack
🇩🇪
rh24
2026-09-17 17:30:22
(1 day ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 40.69.93.182 (IE/Ireland/-): (CF_ENAB ...
show more
(wordpress-user-enum) Failed wordpress-user-enum trigger from 40.69.93.182 (IE/Ireland/-): (CF_ENABLE)
show less
Brute-Force
🇫🇷
masterguru
2026-09-17 13:04:47
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
🇺🇸
TPI-Abuse
2026-09-17 11:15:52
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 40.69.93.182 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 40.69.93.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 07:15:45.162460 2026] [security2:error] [pid 15222:tid 15339] [client 40.69.93.182:45936] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.quantumgaze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.quantumgaze.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqvL4Y8pn6_pOyL1Wc-9iQAAAhU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-17 09:36:59
(1 day ago)
Probing websites for vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 09:28:18
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 40.69.93.182 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 40.69.93.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:28:14.708626 2026] [security2:error] [pid 4007:tid 4007] [client 40.69.93.182:43144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||atmoorehealthcare.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "atmoorehealthcare.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aquyrstVQ0PT79Jb2QbTKAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 08:59:09
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 40.69.93.182 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 40.69.93.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:59:01.882010 2026] [security2:error] [pid 1779:tid 1779] [client 40.69.93.182:52964] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nomorenicenice.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nomorenicenice.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aqur1fw0tJCW7SOH5hT4UgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-09-17 08:46:36
(1 day ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 40.69.93.182 (IE/Ireland/-): 1 in the last 360 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 40.69.93.182 (IE/Ireland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 40.69.93.182 - - [17/Sep/2026:10:46:35 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" 200 12112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" "-" host=coget.srl
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-17 08:09:16
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 40.69.93.182 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 40.69.93.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:09:10.870316 2026] [security2:error] [pid 6447:tid 6447] [client 40.69.93.182:54770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||daebakdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daebakdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqugJtu_chbdwM9ct-fUDQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-09-17 07:57:46
(1 day ago)
WP Authentication attempt for unknown user
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-17 07:28:13
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
🇳🇱
maxxsense
2026-09-17 06:11:59
(1 day ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 40.69.93.182 (IE/Ireland/-)
Brute-Force
🇫🇷
masterguru
2026-09-17 05:42:14
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)
Hacking