🇩🇪
Hazzard
2026-11-15 14:55:22
UTC ·
(1 hour ago)
(wordpress) Failed wordpress login from 138.0.8.77 (AR/Argentina/-/-/138-0-8-77.multimega.net.ar/[redacted]): (CF_ENABLE)
Brute-Force
2026-11-14 20:38:07
UTC ·
(19 hours ago)
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, [3/3] done
Hacking
Web App Attack
🇺🇸
Rip
2026-11-13 23:29:53
UTC ·
(1 day ago)
WordPress fingerprinting and attack surface probing
Port Scan
Web App Attack
🇦🇺
QT
2026-11-13 19:32:55
UTC ·
(1 day ago)
Unauthorised WordPress admin login attempted at 2026-11-14 05:32:46 +1000
Web App Attack
🇦🇺
screwlooseit.com.au
2026-11-13 07:41:29
UTC ·
(2 days ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
AR/Argentina/138-0-8-77.multimega.net.ar
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 01:03:39
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 20:03:32.352791 2026] [security2:error] [pid 7691:tid 7691] [client 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 20:03:32.352791 2026] [security2:error] [pid 7691:tid 7691] [client 138.0.8.77:49404] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||microkerneltechnologies.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "microkerneltechnologies.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avZh5FpnNwADX4H0KLDuygAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:32:03
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:31:57.911981 2026] [security2:error] [pid 32697:tid 32697] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:31:57.911981 2026] [security2:error] [pid 32697:tid 32697] [client 138.0.8.77:59702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fusteriafontane.casademunt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fusteriafontane.casademunt.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "avYULf-vQLoRoyws9MELegAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-11-12 11:38:30
UTC ·
(3 days ago)
(wordpress) Failed wordpress login from 138.0.8.77 (AR/Argentina/-/-/138-0-8-77.multimega.net.ar/[redacted]): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-11-11 20:03:33
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:03:25.894038 2026] [security2:error] [pid 15657:tid 15657] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:03:25.894038 2026] [security2:error] [pid 15657:tid 15657] [client 138.0.8.77:55856] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nuegrapes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nuegrapes.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avTKDdW3HDQiTB1fuXRvMQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 13:22:13
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:22:06.779254 2026] [security2:error] [pid 12001:tid 12001] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:22:06.779254 2026] [security2:error] [pid 12001:tid 12001] [client 138.0.8.77:33148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gellertdealers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gellertdealers.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "avMafrehPmD6V-5NrT7F9AAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:21:04
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:20:56.804489 2026] [security2:error] [pid 7644:tid 7644] [client 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:20:56.804489 2026] [security2:error] [pid 7644:tid 7644] [client 138.0.8.77:51786] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||badgerkelley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "badgerkelley.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avLF2ACKzLHqmzsk31nSCwAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:48:46
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:48:38.987408 2026] [security2:error] [pid 2501967:tid 2501989] [cl ...
show more
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:48:38.987408 2026] [security2:error] [pid 2501967:tid 2501989] [client 138.0.8.77:33688] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||otemaetk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "otemaetk.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avJ39mvti4-b0UlDlhrzfAAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
zam
2026-11-08 17:23:14
UTC ·
(6 days ago)
138.0.8.77 - - [08/Nov/2026:17:23:11 +0000] 0 "POST /xmlrpc.php HTTP/1.1" 403 239
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 06:06:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:06:34.015076 2026] [security2:error] [pid 8421:tid 8421] [client 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 138.0.8.77 (138-0-8-77.multimega.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:06:34.015076 2026] [security2:error] [pid 8421:tid 8421] [client 138.0.8.77:52438] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||heavymetalnutrition.blog|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heavymetalnutrition.blog"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au1uahUBrW937EkuIBsbrQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-05 19:00:45
UTC ·
(1 week ago)
POST /xmlrpc.php HTTP/1.1
...
Brute-Force
