🇺🇸
nyt
2026-09-01 11:29:58
(1 hour ago)
WP login POST blocked by WAF, Bare UA + POST
Brute-Force
Web App Attack
🇩🇪
LRob
2026-09-01 04:33:45
(8 hours ago)
WordPress login brute-force | path: /wp-login.php | 2026-09-01 04:33 UTC
Brute-Force
Web App Attack
2026-09-01 02:08:52
(11 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-31 22:00:43
(15 hours ago)
Auto-ban: >3000 req/min op 2026-08-31
Web App Attack
SSH
Hacking
2026-08-31 02:03:21
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
neckaralb-admin.de
2026-08-30 22:59:00
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-29 08:21:01
(3 days ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
NL/Netherlands/-
Web App Attack
🇩🇪
gadix
2026-08-28 22:23:39
(3 days ago)
45.131.193.177 - - [29/Aug/2026:00:08:58 +0200] "POST /wp-login.php HTTP/1.1" 200 16968 "-" "Mozilla ...
show more
45.131.193.177 - - [29/Aug/2026:00:08:58 +0200] "POST /wp-login.php HTTP/1.1" 200 16968 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
45.131.193.177 - - [29/Aug/2026:00:13:24 +0200] "POST /wp-login.php HTTP/1.1" 200 3319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
45.131.193.177 - - [29/Aug/2026:00:23:37 +0200] "POST /wp-login.php HTTP/1.1" 200 16965 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0)
...
show less
Web App Attack
🇮🇩
Burayot
2026-08-28 19:35:52
(3 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.131.193.177 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.131.193.177 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇵🇱
sefinek.net
2026-08-28 06:48:40
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
neckaralb-admin.de
2026-08-27 23:41:49
(4 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-08-26 17:44:44
(5 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-20 02:46:36
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.131.193.177 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.193.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 22:46:29.054696 2026] [security2:error] [pid 14210:tid 14210] [client 45.131.193.177:27001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.244"] [uri "/conf/.env"] [unique_id "aoZqhYuEl56dCGWuKONDDgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-20 02:20:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.131.193.177 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.193.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 22:20:45.699123 2026] [security2:error] [pid 6126:tid 6126] [client 45.131.193.177:42535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.12"] [uri "/audio/.env"] [unique_id "aoZkfY3Fc9kUhMpcVNMiXQAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-20 01:05:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.131.193.177 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.193.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:04:50.506139 2026] [security2:error] [pid 20789:tid 20789] [client 45.131.193.177:47503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.39"] [uri "/crm/.env"] [unique_id "aoZSssKtQzLEM4OXecJTbwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack