|
🇺🇸
ambor
|
|
Honeypot access: WordPress XML-RPC attack attempt. Path: /xmlrpc.php
|
Brute-Force
Web App Attack
|
|
|
🇺🇸
lostswordfish.com
|
|
Wordfence waf block on registrymatters
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 50.116.95.41 (cloud262.hostgator.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 50.116.95.41 (cloud262.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 02:57:20.365841 2026] [security2:error] [pid 12283:tid 12323] [client 50.116.95.41:12904] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||streamriders.com.hdtv55.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "streamriders.com.hdtv55.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiJzUKQ-Uy94jdKvK1969AAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 50.116.95.41 (cloud262.hostgator.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 50.116.95.41 (cloud262.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 02:40:40.625005 2026] [security2:error] [pid 30098:tid 30098] [client 50.116.95.41:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.southernbroadcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.southernbroadcast.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiJvaJlmneSavlX7sHmE1wAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 50.116.95.41 (cloud262.hostgator.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 50.116.95.41 (cloud262.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 17:32:16.112957 2026] [security2:error] [pid 22541:tid 22545] [client 50.116.95.41:25904] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kettlehill.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kettlehill.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiHu4BErUxo4Pw9IdPWJmAAAAMI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇲🇹
Malta
|
|
50.116.95.41 - - [04/Jun/2026:19:39:26 +0200] "GET /wp-json/wp/v2/users/me HTTP/1.1" "Mozilla/5.0 (X ...
show more
50.116.95.41 - - [04/Jun/2026:19:39:26 +0200] "GET /wp-json/wp/v2/users/me HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
|
Hacking
Web App Attack
VPN IP
|
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
|
Exploited Host
Web App Attack
|
|
|
🇩🇪
Martin Lundstrom
|
|
https://www.eagleeye-intelligence.com — WordPress attack. Automatically detected and blocked.
|
Web App Attack
|
|
|
Anonymous
|
|
Web App Attack, Hacking
|
Hacking
Web App Attack
|
|
|
🇬🇧
spamverify.com
|
|
Honeypot Hit: WordPress Login
|
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 50.116.95.41 (cloud262.hostgator.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 50.116.95.41 (cloud262.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 13:53:37.164550 2026] [security2:error] [pid 28601:tid 28601] [client 50.116.95.41:56226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||joevallone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "joevallone.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ah3HIeKyGqK-3V2P93MHJQAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇪🇸
10dencehispahard SL
|
|
Suspicious activity detected by Modsecurity [Application attack PHP]
|
Hacking
Web App Attack
|
|