🇳🇱
Site.eu
2026-07-01 13:59:51
(6 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-06-02 11:50:12
(4 weeks ago)
(mod_security) mod_security (id:218580) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:218580) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 07:50:07.833823 2026] [security2:error] [pid 15434:tid 15434] [client 45.132.184.192:10365] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\*[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:main_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.||www.nchsfootballgolfouting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.nchsfootballgolfouting.com"] [uri "/index.php"] [unique_id "ah7Db6uj1w89QMwkHsyoYgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-05-14 22:56:10
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 14:06:27
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 10:06:21.640659 2026] [security2:error] [pid 2733:tid 2733] [client 45.132.184.192:14109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mmailbox.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mmailbox.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agHiXVRgfVeEHBRybMFB-AAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 09:25:53
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 05:25:47.164497 2026] [security2:error] [pid 30613:tid 30613] [client 45.132.184.192:46095] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||randymeisner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "randymeisner.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agBPG9iKodJZdweRAjH11QAAAFM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-27 22:20:39
(2 months ago)
FPROCO WEBEXPLOIT 45.132.184.192 (45.132.184.192)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 04:12:00
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 00:11:55.691423 2026] [security2:error] [pid 12408:tid 12408] [client 45.132.184.192:15475] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||missyallen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "missyallen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae2Qi5TXmO8JYgcjtb-RKgAAAC0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 01:19:10
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.184.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 21:19:07.379188 2026] [security2:error] [pid 4302:tid 4422] [client 45.132.184.192:39181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||power51.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "power51.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae1oC059FNQpNTY1VDhRIAAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-04-21 00:50:57
(2 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇪🇸
el-brujo
2026-04-03 03:50:57
(2 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: AppleWe ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: AppleWebKit/538.38 (KHTML, like Gecko111) Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-04-03T03:50:57Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇩🇪
MusicLibrary
2026-03-27 10:34:07
(3 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇪🇸
el-brujo
2026-03-26 04:55:42
(3 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:145.0) Gecko/20100101 Firefox/145.0 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-03-26T04:55:42Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
2026-03-23 13:03:09
(3 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
🇩🇪
MusicLibrary
2026-03-22 11:48:46
(3 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2026-03-18 20:16:18
(3 months ago)
XML RPC Scan Activities: "2026-03-19T03:16:18.352+07:00" "/xmlrpc.php" "45.132.184.192" "AppleWebKit ...
show more
XML RPC Scan Activities: "2026-03-19T03:16:18.352+07:00" "/xmlrpc.php" "45.132.184.192" "AppleWebKit/534.34 (KHTML, like Gecko111)"
show less
Web App Attack
Brute-Force