🇩🇪
ger-stg-sifi1
2026-07-26 00:20:43
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
2026-07-24 01:38:30
(3 days ago)
WordPress Brute Force
Brute-Force
🇲🇽
octageeks.com
2026-07-23 04:18:09
(4 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-23 03:34:43
(4 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
kosada.com
2026-07-23 03:29:35
(4 days ago)
Web password guessing
Brute-Force
🇩🇪
FeG Deutschland
2026-07-23 02:05:22
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-07-21 23:52:05
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 20:08:25
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 66.175.237.29 (infong-us-cl0103.perfora.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 66.175.237.29 (infong-us-cl0103.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 16:08:19.182642 2026] [security2:error] [pid 2333888:tid 2333888] [client 66.175.237.29:41946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aifactoid.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aifactoid.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al_Rs-4_liR37DkqnhAhwQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 16:54:23
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 66.175.237.29 (infong-us-cl0103.perfora.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 66.175.237.29 (infong-us-cl0103.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 12:54:15.249600 2026] [security2:error] [pid 9508:tid 9508] [client 66.175.237.29:50442] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||k2servicesinc.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k2servicesinc.net"] [uri "/wp-json/wp/v2/users"] [unique_id "al-kN44P_6HFZ52Qmlz3AwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-18 17:00:46
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-11 03:54:47
(2 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
brechtr
2026-07-10 22:38:39
(2 weeks ago)
[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login. ...
show more
[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login.php
show less
Brute-Force
🇺🇸
wordpresshosting.solutions
2026-07-09 02:39:29
(2 weeks ago)
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 66.175.237.29 - - [09/Jul/2026: ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 66.175.237.29 - - [09/Jul/2026:02:39:28 +0000] "GET /wp-login.php HTTP/1.1" 200 6707 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
66.175.237.29 - - [09/Jul/2026:02:39:28 +0000] "POST /wp-login.php HTTP/1.1" 503 23851 "https://[DOMAIN]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 12:00:19
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 66.175.237.29 (infong-us-cl0103.perfora.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 66.175.237.29 (infong-us-cl0103.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 08:00:12.169223 2026] [security2:error] [pid 8421:tid 8421] [client 66.175.237.29:33926] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||comicpreservation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "comicpreservation.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akj1zCsMUx-YODtNhnpUTwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 03:18:33
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 66.175.237.29 (infong-us-cl0103.perfora.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 66.175.237.29 (infong-us-cl0103.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 23:18:27.832608 2026] [security2:error] [pid 10576:tid 10576] [client 66.175.237.29:47474] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||riccardiagency.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "riccardiagency.com"] [uri "/wp-json/wp/v2/users/7"] [unique_id "akh7g77c-2iR7BgXK3gvFQAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack