🇩🇪
neckaralb-admin.de
2026-09-10 02:50:00
(44 minutes ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
LRob
2026-09-10 00:33:05
(3 hours ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /wp-login.php | 2026-09-10 00:33 UTC
show less
Bad Web Bot
🇩🇪
FeG Deutschland
2026-09-10 00:28:56
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-09 14:16:03
(13 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇿
Tripwire
2026-09-09 11:32:27
(16 hours ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇨🇦
polycoda
2026-09-09 11:08:09
(16 hours ago)
📄 Probes for wp-login.php and other inexistent URLs
Hacking
Web App Attack
🇺🇸
Mundo Bueno
2026-09-09 03:08:25
(1 day ago)
[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me | Pays: JP | UA: Mozilla/5.0 (Wi ...
show more
[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me | Pays: JP | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 02:37:02
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 60.124.50.160 (softbank060124050160.bbtec.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 60.124.50.160 (softbank060124050160.bbtec.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 22:36:58.924839 2026] [security2:error] [pid 15068:tid 15068] [client 60.124.50.160:36702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hollyndlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hollyndlaw.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqDGSinrKJ8XuWrU2h0yFQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
gigatech
2026-09-09 02:30:02
(1 day ago)
Webserver Probing
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 01:25:07
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 60.124.50.160 (softbank060124050160.bbtec.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 60.124.50.160 (softbank060124050160.bbtec.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 21:25:01.017505 2026] [security2:error] [pid 15489:tid 15489] [client 60.124.50.160:49678] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mayiasteadman.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mayiasteadman.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqC1bboGrNvcD7bPjr_zEwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-09 00:25:22
(1 day ago)
(wordpress) Failed wordpress login from 60.124.50.160 (JP/Japan/-/-/softbank060124050160.bbtec.net/[ ...
show more
(wordpress) Failed wordpress login from 60.124.50.160 (JP/Japan/-/-/softbank060124050160.bbtec.net/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇩🇪
neckaralb-admin.de
2026-09-09 00:05:28
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
FeG Deutschland
2026-09-08 23:20:00
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 23:11:33
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 60.124.50.160 (softbank060124050160.bbtec.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 60.124.50.160 (softbank060124050160.bbtec.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 19:11:28.985317 2026] [security2:error] [pid 10304:tid 10304] [client 60.124.50.160:59234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tcomputerguy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tcomputerguy.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCWIAzyNjMBFK9ZgXgdTAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 21:56:54
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 60.124.50.160 (softbank060124050160.bbtec.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 60.124.50.160 (softbank060124050160.bbtec.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 17:56:48.771563 2026] [security2:error] [pid 31014:tid 31014] [client 60.124.50.160:41634] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ardath.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ardath.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCEoOyvngG-4crj4q4I3AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack