🇸🇬
securejdprop
2026-06-20 10:36:21
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack
🇲🇽
octageeks.com
2026-06-20 04:19:26
(2 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 20:00:36
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 16:00:31.226982 2026] [security2:error] [pid 28369:tid 28369] [client 135.116.65.19:52155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stoneybluff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stoneybluff.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWf36qSmmXPs2e3LTNWdgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-06-19 19:45:06
(3 days ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 19:42:58
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 15:42:51.006254 2026] [security2:error] [pid 9946:tid 10062] [client 135.116.65.19:57634] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gilesrentalcars.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gilesrentalcars.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWbu78GBx2_dwUTSKjgAAAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 19:21:36
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 15:21:30.989234 2026] [security2:error] [pid 22528:tid 22548] [client 135.116.65.19:53644] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||executiveconsultingpr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "executiveconsultingpr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWWuhWnqJd7WCSe64JxDgAAAFI"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 18:51:41
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 14:51:38.179797 2026] [security2:error] [pid 26146:tid 26146] [client 135.116.65.19:53604] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sutherlandyogastudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sutherlandyogastudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWPulLxQq3HefU8RhZGJQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-06-19 18:45:25
(3 days ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇩🇪
LRob.fr
2026-06-19 18:45:07
(3 days ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇨🇦
KIsmay
2026-06-19 18:44:05
(3 days ago)
Jun 19 14:43:44 www4 WPAudit[2506118]: 135.116.65.19 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64 ...
show more
Jun 19 14:43:44 www4 WPAudit[2506118]: 135.116.65.19 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" [email protected] :63a9f0ea7bb98050796b649e85481845 FAIL
Jun 19 14:43:50 www4 WPAudit[2506118]: 135.116.65.19 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" administrator:Jane392216 FAIL
Jun 19 14:43:56 www4 WPAudit[2506127]: 135.116.65.19 vhsport.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" WhoAdminKnows:Who1oxpjbze1Knows FAIL
Jun 19 14:43:59 www4 WPAudit[2506118]: 135.116.65.19 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" webuser:azLU0o0GmtOy FAIL
Jun 19 14:44:04 www4 WPAudit[2506127]: 135.116.65.19 vhsport.ca "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0
...
show less
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-19 18:36:16
(3 days ago)
(wp_login_try) srv104 WP Login Attempt 135.116.65.19 (SE/Sweden/-): 10 in the last 3600 secs; Ports: ...
show more
(wp_login_try) srv104 WP Login Attempt 135.116.65.19 (SE/Sweden/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇦🇺
rubixstudios
2026-06-19 18:36:02
(3 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
2026-06-19 18:34:10
(3 days ago)
135.116.65.19 - - [19/Jun/2026:15:34:09 -0300] "GET /wp-login.php HTTP/1.1" 404 548 "https://www.goo ...
show more
135.116.65.19 - - [19/Jun/2026:15:34:09 -0300] "GET /wp-login.php HTTP/1.1" 404 548 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
135.116.65.19 - - [19/Jun/2026:15:34:09 -0300] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
135.116.65.19 - - [19/Jun/2026:15:34:09 -0300] "GET /wp-login.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Port Scan
🇦🇺
QT
2026-06-19 18:31:37
(3 days ago)
Unauthorised WordPress admin login attempted at 2026-06-20 04:31:28 +1000
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 18:16:02
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 135.116.65.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 14:15:57.606832 2026] [security2:error] [pid 31391:tid 31391] [client 135.116.65.19:58868] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||taekwondoit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "taekwondoit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWHXVNPGIAc-tY1NSr1jgAAABA"], referer: https://t.co/
show less
Brute-Force
Bad Web Bot
Web App Attack