🇩🇪
bsoft.de
2026-10-26 12:18:15
(1 day ago)
84.108.109.178 - - [26/Oct/2026:13:17:24 +0100] "GET /wp-json/wp/v2/users?_jsonp=callback&per_page=1 ...
show more
84.108.109.178 - - [26/Oct/2026:13:17:24 +0100] "GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug&page=1 HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
84.108.109.178 - - [26/Oct/2026:13:18:11 +0100] "GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name HTTP/1.1" 404 148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
84.108.109.178 - - [26/Oct/2026:13:18:15 +0100] "GET /index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/1.1" 404 148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
show less
Web App Attack
🇩🇪
svr
2026-10-22 15:12:20
(5 days ago)
Abusive Automated Web Scanner
Web App Attack
🇩🇪
LRob
2026-10-21 16:54:53
(6 days ago)
Vulnerability scanning | host: pestacolo.com | method: GET, POST | path: /wp-json/wp/v2/users/me, /x ...
show more
Vulnerability scanning | host: pestacolo.com | method: GET, POST | path: /wp-json/wp/v2/users/me, /xmlrpc.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 | src_port: 57569
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 16:30:43
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 84.108.109.178 (bzq-84-108-109-178.cablep.bezeq ...
show more
(mod_security) mod_security (id:225170) triggered by 84.108.109.178 (bzq-84-108-109-178.cablep.bezeqint.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 12:30:37.294226 2026] [security2:error] [pid 13189:tid 13189] [client 84.108.109.178:25702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||egelfitness.nl|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "egelfitness.nl"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ateXLZqwfWLaXJfU6x_nxwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-20 12:19:33
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇩🇪
FeG Deutschland
2026-10-17 11:28:20
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-09-13 18:05:18
(1 month ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇲🇹
Malta
2026-09-13 14:06:52
(1 month ago)
84.108.109.178 - - [13/Sep/2026:16:06:52 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ...
show more
84.108.109.178 - - [13/Sep/2026:16:06:52 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-09-11 14:55:04
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 84.108.109.178 (bzq-84-108-109-178.cablep.bezeq ...
show more
(mod_security) mod_security (id:225170) triggered by 84.108.109.178 (bzq-84-108-109-178.cablep.bezeqint.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 10:54:55.734013 2026] [security2:error] [pid 15335:tid 15335] [client 84.108.109.178:26620] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lawrencehale.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lawrencehale.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqQWPzNEyqgkfjfm1S78vwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-21 03:05:34
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇫🇷
Zkillu
2026-08-20 16:23:25
(2 months ago)
DDoS flood attack against 82.152.54.0 (2026-08-20 16:18:25 -> 2026-08-20 16:33:25 UTC) targeting AS2 ...
show more
DDoS flood attack against 82.152.54.0 (2026-08-20 16:18:25 -> 2026-08-20 16:33:25 UTC) targeting AS215599. This IP (AS8551) sent ~5580 packets (7.93 MB) during the attack window. Likely a compromised device (botnet).
show less
DDoS Attack
Exploited Host
