🇫🇷
SpaceHost-Server
2026-10-16 22:22:52
(5 hours ago)
Brute-Force
Web App Attack
🇳🇱
tmiland
2026-10-16 18:04:16
(9 hours ago)
(wordpress_login) WordPress Login Attack 50.6.43.12 (IN/India/sh00622.bluehost.com): 3 in the last 3 ...
show more
(wordpress_login) WordPress Login Attack 50.6.43.12 (IN/India/sh00622.bluehost.com): 3 in the last 3600 secs; IP: 50.6.43.12; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 50.6.43.12 - - [16/Oct/2026:20:04:10 +0200] "POST /wp-login.php HTTP/1.1" 200 2532 "https://autodiscover.*.*/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 50.6.43.12 - - [16/Oct/2026:20:04:12 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fautodiscover.*.*%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/1.1" 200 2417 "https://autodiscover.*.*/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 50.6.43.12 - - [16/Oct/2026:20:04:13 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fautodiscover.*.*%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 2411 "https://autodiscover.*.*/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
show less
Brute-Force
🇳🇱
BlueWire Hosting
2026-10-16 17:37:46
(10 hours ago)
Probing websites for vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 17:09:47
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:09:39.447441 2026] [security2:error] [pid 17725:tid 17725] [client 50.6.43.12:51318] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artigelisim.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artigelisim.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJaUwhQN68ZPl4esEfjsgAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyt
2026-10-16 15:14:16
(12 hours ago)
Brute-Force, Web App Attack, suspicious: XMLRPC Attack
Brute-Force
Web App Attack
2026-10-16 14:53:02
(13 hours ago)
WordPress Brute Force
Brute-Force
🇺🇸
TPI-Abuse
2026-10-16 14:22:53
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:22:49.424487 2026] [security2:error] [pid 10578:tid 10578] [client 50.6.43.12:50476] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||desarrollosdecolima.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desarrollosdecolima.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atIzOWyxN5tZGEPakrEzuwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 13:39:02
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:38:55.151652 2026] [security2:error] [pid 6068:tid 6091] [client 50.6.43.12:21006] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||permisos.pr|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "permisos.pr"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atIo73gjLf5qFMLqDam7yQAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
solution.it
2026-10-16 13:32:37
(14 hours ago)
[Fri Oct 16 15:32:36.661484 2026] [php7:error] [pid 3519679:tid 3519679] [client 50.6.43.12:51198] s ...
show more
[Fri Oct 16 15:32:36.661484 2026] [php7:error] [pid 3519679:tid 3519679] [client 50.6.43.12:51198] script '/var/www/html/www.craccaaltesoro.it/wp-login.php' not found or unable to stat, referer: https://craccaaltesoro.it/wp-login.php
show less
Web App Attack
🇺🇸
nationaleventpros.com
2026-10-16 13:03:08
(15 hours ago)
WordPress login attempt
Brute-Force
🇬🇧
consul.to
2026-10-16 12:59:17
(15 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇭🇷
bubausluge
2026-10-16 12:43:52
(15 hours ago)
Blocked by https://aegis.hr — WebHost: ModSecurity CRS Alert - (MITRE T1190), 4 attempts, Period: 20 ...
show more
Blocked by https://aegis.hr — WebHost: ModSecurity CRS Alert - (MITRE T1190), 4 attempts, Period: 2026-10-16 12:19:04 to 2026-10-16 12:19:04
show less
Web App Attack
Bad Web Bot
🇺🇸
nyt
2026-10-16 12:08:47
(15 hours ago)
Brute-Force, Web App Attack, suspicious: WP login POST blocked by WAF
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 11:54:58
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:54:51.277265 2026] [security2:error] [pid 13408:tid 13408] [client 50.6.43.12:22554] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||broneksuchanek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "broneksuchanek.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atIQi34irishrhK9F6UvcQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 11:15:23
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 50.6.43.12 (sh00622.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:15:16.048177 2026] [security2:error] [pid 31982:tid 31982] [client 50.6.43.12:28586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||naturalacu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "naturalacu.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atIHRB55irnBvkAwzJIljAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack