🇫🇷
dynamix
2026-07-13 13:11:49
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-28 07:30:10
(2 weeks ago)
Fail2Ban banned 122.8.95.141 for security violations in jail wp-armour. Log: 2026/06/28 07:30:08 [er ...
show more
Fail2Ban banned 122.8.95.141 for security violations in jail wp-armour. Log: 2026/06/28 07:30:08 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 122.8.95.141 | Target: wplogin" , client: 122.8.95.141, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇩🇪
4server
2026-06-16 14:23:33
(4 weeks ago)
[TueJun1616:23:29.0802352026][security2:error][pid1896538:tid1896556][client122.8.95.141:0]ModSecuri ...
show more
[TueJun1616:23:29.0802352026][security2:error][pid1896538:tid1896556][client122.8.95.141:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.gustotondo.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajFcYTKJ20-QC2hb_wulFQAAAQ8\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 05:40:53
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 122.8.95.141 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.95.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 01:40:47.196864 2026] [security2:error] [pid 16758:tid 16758] [client 122.8.95.141:38675] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||randeen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "randeen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afmC39vd-JxOX3ZC2PPm4wAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-05-03 15:55:07
(2 months ago)
WP User Enumeration, WP Author Enumeration
Web App Attack
2026-04-23 10:24:18
(2 months ago)
FPROCO WEBEXPLOIT 122.8.95.141 (122.8.95.141)
Web App Attack
🇺🇸
octageeks.com
2026-04-13 04:07:33
(3 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 00:35:36
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 122.8.95.141 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.95.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 20:35:30.572489 2026] [security2:error] [pid 1569:tid 1595] [client 122.8.95.141:61419] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||andyboynton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andyboynton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acnFUgg29tOT-FjexC58lAAAANg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-28 22:35:11
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 122.8.95.141 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.95.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 18:35:07.273432 2026] [security2:error] [pid 7436:tid 7436] [client 122.8.95.141:40693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fitnessdoctors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fitnessdoctors.com"] [uri "/wp-json/wp/v2/users"] [unique_id "achXm5czEpHPEfdNlrXbGwAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 09:26:49
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 122.8.95.141 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.95.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 04:26:44.754952 2026] [security2:error] [pid 19800:tid 19800] [client 122.8.95.141:33509] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mccompu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mccompu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHtVFG55Yf7gBXvxhBb4gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack