🇫🇷
masterguru
2026-07-05 08:18:12
(2 weeks ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 185.46.41.104 (TR/Turkey/-): 1 in the last 36 ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 185.46.41.104 (TR/Turkey/-): 1 in the last 3600 secs (0-196)
show less
Hacking
2026-07-05 01:02:04
(2 weeks ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, [2/2] done, POST /wp-login.php H ...
show more
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, [2/2] done, POST /wp-login.php HTTP/2.0
show less
Hacking
Web App Attack
2026-07-04 16:07:41
(2 weeks ago)
185.46.41.104 - - [04/Jul/2026:18:07:36 +0200] "GET /wp-login.php HTTP/2.0" 200 3998 "-" "Mozilla/5. ...
show more
185.46.41.104 - - [04/Jul/2026:18:07:36 +0200] "GET /wp-login.php HTTP/2.0" 200 3998 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 04:55:44
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.46.41.104 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 185.46.41.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:55:40.236310 2026] [security2:error] [pid 21833:tid 21833] [client 185.46.41.104:42874] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||slattery-law.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "slattery-law.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akiSTHYUSjo_sKztbezzmQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 22:56:16
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.46.41.104 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 185.46.41.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:56:12.110310 2026] [security2:error] [pid 11868:tid 11939] [client 185.46.41.104:34722] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||planmytrust.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "planmytrust.com"] [uri "/wp-json/wp/v2/users/7"] [unique_id "akg-DIeTVGVXls7GOrNE3wAAAMo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-03 12:44:42
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇫🇷
solution.it
2026-07-01 05:35:50
(3 weeks ago)
[Wed Jul 01 07:35:49.294188 2026] [php7:error] [pid 49880:tid 49880] [client 185.46.41.104:56294] sc ...
show more
[Wed Jul 01 07:35:49.294188 2026] [php7:error] [pid 49880:tid 49880] [client 185.46.41.104:56294] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇲🇹
Malta
2026-07-01 02:47:07
(3 weeks ago)
185.46.41.104 - - [01/Jul/2026:04:47:07 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh ...
show more
185.46.41.104 - - [01/Jul/2026:04:47:07 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇮🇹
Progetto1
2026-06-30 20:25:03
(3 weeks ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
neckaralb-admin.de
2026-06-30 12:37:28
(3 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
ELYAZ
2026-06-29 16:16:13
(3 weeks ago)
(y4) Failed scan -byebye- from 185.46.41.104 (TR/Türkiye/-): (CF_ENABLE)
Hacking
🇺🇸
nationaleventpros.com
2026-06-29 16:01:55
(3 weeks ago)
WordPress login attempt
Brute-Force
🇩🇪
FeG Deutschland
2026-06-29 00:22:03
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 14:21:52
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.46.41.104 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 185.46.41.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 10:21:47.143249 2026] [security2:error] [pid 15086:tid 15086] [client 185.46.41.104:35496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||warpedweed.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "warpedweed.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akEt-yQWFMmJ2kgP9DJiVwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 10:41:01
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.46.41.104 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 185.46.41.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 06:40:53.501883 2026] [security2:error] [pid 2219:tid 2219] [client 185.46.41.104:54496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frogdesignmexico.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frogdesignmexico.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akD6NZhA46wbTYoUZ0-mNgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack