🇺🇸
mnsf
2026-06-10 00:11:14
(2 months ago)
Login Too Frequent (7)
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-06-09 17:02:33
(2 months ago)
30.556 requests from untrusted country (1w1d14h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 15:56:09
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 134.209.110.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 134.209.110.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:56:03.524396 2026] [security2:error] [pid 8933:tid 8933] [client 134.209.110.232:62786] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||creationorevolution.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "creationorevolution.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aig3k-e0-ioVfpA9fF5vBwAAABI"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-06-09 15:45:03
(2 months ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇩🇪
Séfora Srl
2026-06-09 14:02:31
(2 months ago)
Failed attempt detected by Fail2Ban in plesk-wordpress jail
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 13:49:44
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 134.209.110.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 134.209.110.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:49:40.174798 2026] [security2:error] [pid 4304:tid 4321] [client 134.209.110.232:57029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||councilofforeignministers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "councilofforeignministers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aigZ9F9mbGMqUI2a-Sl-JQAAAU4"], referer: https://wordpress.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-09 13:46:08
(2 months ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
🇱🇻
garmtech.com
2026-06-09 12:15:18
(2 months ago)
Attempted access to sensitive endpoint (/license.txt) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/license.txt) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇫🇷
dynamix
2026-06-09 01:01:02
(2 months ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇪🇸
alferez
2026-06-08 23:36:16
(2 months ago)
Multiple WP Login Attack
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 22:34:38
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 134.209.110.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 134.209.110.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 18:34:34.652732 2026] [security2:error] [pid 9021:tid 9021] [client 134.209.110.232:61463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dixiegeek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dixiegeek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aidDelqWk74SBE3uG_bFugAAAAE"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-06-08 18:33:50
(2 months ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇦🇺
clapper
2026-06-08 17:55:19
(2 months ago)
(mod_security) mod_security (id:5000135) triggered by 134.209.110.232 (SG/Singapore/-): 5 in the las ...
show more
(mod_security) mod_security (id:5000135) triggered by 134.209.110.232 (SG/Singapore/-): 5 in the last 600 secs; ID: rub
show less
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-08 15:07:17
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 134.209.110.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 134.209.110.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:07:14.041365 2026] [security2:error] [pid 24371:tid 24371] [client 134.209.110.232:50884] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||disio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "disio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aibaoiQAqIZP3ulXFUZVNAAAAAg"], referer: https://t.co/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TAY
2026-06-08 06:15:48
(2 months ago)
134.209.110.232 - - [08/Jun/2026:14:15:45 +0800] "POST /wp-login.php HTTP/1.1" 200 2775 "https://www ...
show more
134.209.110.232 - - [08/Jun/2026:14:15:45 +0800] "POST /wp-login.php HTTP/1.1" 200 2775 "https://www.kacsb.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0"
134.209.110.232 - - [08/Jun/2026:14:15:47 +0800] "POST /wp-login.php HTTP/1.1" 200 2812 "https://www.kacsb.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/119.0.1"
134.209.110.232 - - [08/Jun/2026:14:15:48 +0800] "POST /wp-login.php HTTP/1.1" 200 2803 "https://www.kacsb.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36"
...
show less
Brute-Force