2026-06-12 13:46:20
(1 day ago)
Failed Wordpress Logins
Web App Attack
2026-06-11 04:46:16
(3 days ago)
Failed Wordpress Logins
Web App Attack
🇦🇹
neo72
2026-06-10 09:33:38
(3 days ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-06-10 04:46:01
(4 days ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇳🇱
Site.eu
2026-06-10 03:24:45
(4 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-09 22:05:09
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 51.68.55.242 (ip242.ip-51-68-55.eu): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 51.68.55.242 (ip242.ip-51-68-55.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 18:05:06.349711 2026] [security2:error] [pid 30016:tid 30016] [client 51.68.55.242:38196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||psychiatryabuse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "psychiatryabuse.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiiOEqOFV0oA41uIXlxnQwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tecnicorioja
2026-06-09 22:01:15
(4 days ago)
wp-login attack [10/Jun/2026:00:00:45
Brute-Force
Web App Attack
🇩🇪
grassau.com
2026-06-09 21:50:08
(4 days ago)
(wordpress) Failed wordpress login from 51.68.55.242 (FR/France/-/-/ip242.ip-51-68-55.eu)
Brute-Force
2026-06-09 21:32:08
(4 days ago)
[Tue Jun 09 22:19:22.481388 2026] [authz_core:error] [pid 173309:tid 173418] [client 51.68.55.242:42 ...
show more
[Tue Jun 09 22:19:22.481388 2026] [authz_core:error] [pid 173309:tid 173418] [client 51.68.55.242:42234] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Tue Jun 09 22:19:22.544301 2026] [authz_core:error] [pid 173309:tid 173430] [client 51.68.55.242:42234] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://akcurate.de/wp-login.php
[Tue Jun 09 23:32:06.342609 2026] [authz_core:error] [pid 173309:tid 173433] [client 51.68.55.242:35384] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php
[Tue Jun 09 23:32:06.398910 2026] [authz_core:error] [pid 173309:tid 173442] [client 51.68.55.242:35384] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://pre.cimt-precision.de/wp-login.php
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 21:30:58
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 51.68.55.242 (ip242.ip-51-68-55.eu): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 51.68.55.242 (ip242.ip-51-68-55.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:30:51.306644 2026] [security2:error] [pid 3058:tid 3058] [client 51.68.55.242:40150] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jesussotoca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jesussotoca.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiiGC5MxAiw3FN05aZfaDQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 21:30:13
(4 days ago)
Attac
Brute-Force
🇺🇸
freeutka
2026-06-09 21:23:13
(4 days ago)
WordPress brute-force login attempt on wp-login.php.
Brute-Force
Web App Attack
🇫🇷
ELYAZ
2026-06-09 21:19:26
(4 days ago)
(wordpress) Failed wordpress login from 51.68.55.242 (FR/France/ip242.ip-51-68-55.eu): (CF_ENABLE)
Brute-Force
🇩🇪
Marc
2026-06-09 21:11:50
(4 days ago)
51.68.55.242 - - [09/Jun/2026:19:40:02 +0200] "POST /wp-login.php HTTP/2.0" 403 11162 "https://saats ...
show more
51.68.55.242 - - [09/Jun/2026:19:40:02 +0200] "POST /wp-login.php HTTP/2.0" 403 11162 "https://saatschule.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 51.68.55.242 - - [09/Jun/2026:22:19:14 +0200] "GET /wp-login.php HTTP/2.0" 200 4086 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 51.68.55.242 - - [09/Jun/2026:22:19:14 +0200] "POST /wp-login.php HTTP/2.0" 403 11126 "https://saatschule.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 51.68.55.242 - - [09/Jun/2026:23:11:45 +0200] "GET /wp-login.php HTTP/2.0" 200 3460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 51.68.55.242 - - [09/Jun/2026:23:11:49 +0200] "POST /wp-login.php HTTP/2.0" 200 3295 "https://alsarnsberg.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l
show less
Brute-Force
Web App Attack
🇳🇱
juutis
2026-06-09 21:00:15
(4 days ago)
51.68.55.242 - - [09/Jun/2026:21:54:13 +0200] "POST /wp-login.php HTTP/1.1" 200 7793 "https://taides ...
show more
51.68.55.242 - - [09/Jun/2026:21:54:13 +0200] "POST /wp-login.php HTTP/1.1" 200 7793 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
51.68.55.242 - - [09/Jun/2026:22:23:49 +0200] "POST /wp-login.php HTTP/1.1" 200 7829 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
51.68.55.242 - - [09/Jun/2026:23:00:14 +0200] "POST /wp-login.php HTTP/1.1" 200 7789 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Web App Attack