🇺🇸
anon333
2026-07-03 00:06:19
(13 hours ago)
Invalid HTTP port 80 probes to server T2006
Hacking
Exploited Host
2026-07-02 23:44:56
(14 hours ago)
Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.
Web App Attack
🇩🇪
stinpriza
2026-07-02 22:42:41
(15 hours ago)
Web App Attack
Web App Attack
🇺🇸
anon333
2026-07-02 22:34:36
(15 hours ago)
Hacker syslog review 1783031675
Hacking
🇺🇸
TPI-Abuse
2026-07-02 22:27:48
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:27:42.910505 2026] [security2:error] [pid 16171:tid 16171] [client 40.75.131.145:37714] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||needtoorder.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "needtoorder.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "akbl3lUmQAZmriP-3Dj7tgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-07-02 22:20:51
(15 hours ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 22:08:42
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:08:35.648831 2026] [security2:error] [pid 20031:tid 20031] [client 40.75.131.145:38049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||estellenussbaum.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "estellenussbaum.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akbhY2TFb_04YZPRPm4WqQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bigwavedave
2026-07-02 22:00:45
(15 hours ago)
Wordpress Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 21:47:59
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 17:47:55.138018 2026] [security2:error] [pid 14958:tid 14958] [client 40.75.131.145:38117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gcmmortgage.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gcmmortgage.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akbci6RjiWEM-CWG9DOtrgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kommunos
2026-07-02 21:38:07
(16 hours ago)
/wp-json/wp/v2/users/
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 20:54:50
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:54:43.715768 2026] [security2:error] [pid 10247:tid 10247] [client 40.75.131.145:37142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||afjm.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "afjm.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "akbQE6T3j3tKVFsUCEfbDQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-07-02 20:53:09
(16 hours ago)
(XMLRPC) WP XMLRPC Attack 40.75.131.145 (US/United States/California/San Jose/-/[AS8075 MICROSOFT-CO ...
show more
(XMLRPC) WP XMLRPC Attack 40.75.131.145 (US/United States/California/San Jose/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 40.75.131.145 - - [02/Jul/2026:23:38:29 +0300] "POST /xmlrpc.php HTTP/1.1" 403 7335 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-07-02 20:38:35
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:38:29.622225 2026] [security2:error] [pid 30577:tid 30577] [client 40.75.131.145:37257] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||qu1ck.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "qu1ck.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akbMRe_359xu4_pWv-lefAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-02 20:28:44
(17 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-07-02 20:23:34
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 40.75.131.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:23:30.639628 2026] [security2:error] [pid 5316:tid 5316] [client 40.75.131.145:37822] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||radixtx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "radixtx.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akbIwskoPQFGoTcT94FxUQAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack