๐บ๐ธ
TPI-Abuse
2026-06-09 17:08:11
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2002:86d1:6c02::86d1:6c02 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:86d1:6c02::86d1:6c02 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:08:05.501920 2026] [security2:error] [pid 25448:tid 25448] [client 2002:86d1:6c02::86d1:6c02:59280] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||digi-estudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "digi-estudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aihIdX8hi5UU2r5KbJ3fEgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-06-09 15:13:49
(1 week ago)
25.936 requests from untrusted country (1w6d21h)
Brute-Force
Bad Web Bot
๐ฉ๐ช
Ba-Yu
2026-06-09 08:36:34
(1 week ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ซ๐ท
GabrielJST
2026-06-09 07:13:11
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 134.209.108.2 (SG/Si ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 134.209.108.2 (SG/Singapore/-)
show less
Bad Web Bot
Anonymous
2026-06-09 05:53:08
(1 week ago)
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-login.php?redirect_to=h ...
show more
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Fdezwanebloem.nl%2Fw, GET /wp-login.php HTTP/1.1, GET /wp-admin/index.php HTTP/1.1
show less
Hacking
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-09 04:00:18
(1 week ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐บ๐ธ
Jason Howell
2026-06-09 03:28:46
(1 week ago)
134.209.108.2 - - [08/Jun/2026:22:28:42 -0500] "GET /wp-login.php HTTP/1.1" 200 5564 "-" "Mozilla/5. ...
show more
134.209.108.2 - - [08/Jun/2026:22:28:42 -0500] "GET /wp-login.php HTTP/1.1" 200 5564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36"
134.209.108.2 - - [08/Jun/2026:22:28:42 -0500] "GET /wp-login.php HTTP/1.1" 200 5564 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36"
134.209.108.2 - - [08/Jun/2026:22:28:43 -0500] "POST /wp-login.php HTTP/1.1" 200 1932 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/119.0.1"
134.209.108.2 - - [08/Jun/2026:22:28:44 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 619 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/119.0.1"
134.209.108.2 - - [08/Jun/2026:22:28:45 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 759
...
show less
Web App Attack
Anonymous
2026-06-09 03:12:54
(1 week ago)
(wordpress) Failed wordpress login from 134.209.108.2 (SG/Singapore/-)
Brute-Force
๐ฉ๐ช
LRob.fr
2026-06-09 02:45:13
(1 week ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
๐ฉ๐ช
abdubhai
2026-06-09 00:57:36
(1 week ago)
134.209.108.2 - - [09/Jun/2026:0
...
Brute-Force
๐บ๐ธ
mnsf
2026-06-09 00:18:34
(1 week ago)
Login Too Frequent (7)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 22:45:41
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 134.209.108.2 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 134.209.108.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 18:45:35.906030 2026] [security2:error] [pid 6191:tid 6191] [client 134.209.108.2:55972] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dianamead.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dianamead.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aidGD09_sgihlt6eismFMQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-06-08 22:26:02
(1 week ago)
Brute-Force
Web App Attack
๐บ๐ธ
Jason Howell
2026-06-08 22:16:51
(1 week ago)
134.209.108.2 - - [08/Jun/2026:17:15:52 -0500] "GET /wp-login.php HTTP/1.1" 200 5564 "https://wordpr ...
show more
134.209.108.2 - - [08/Jun/2026:17:15:52 -0500] "GET /wp-login.php HTTP/1.1" 200 5564 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
134.209.108.2 - - [08/Jun/2026:17:16:39 -0500] "POST /wp-login.php HTTP/1.1" 200 5927 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
134.209.108.2 - - [08/Jun/2026:17:16:43 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 4615 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
134.209.108.2 - - [08/Jun/2026:17:16:47 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7594 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML,
...
show less
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-08 21:15:09
(1 week ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack