๐บ๐ธ
TPI-Abuse
2026-09-27 14:08:16
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 135.136.51.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 135.136.51.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 10:08:11.648307 2026] [security2:error] [pid 3938:tid 3976] [client 135.136.51.114:53900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abusaimeh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abusaimeh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arkjS_casCUgjU_-b6OLyAAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-27 12:43:23
(18 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ณ๐ฑ
MacLotsen
2026-09-27 12:28:02
(18 hours ago)
135.136.51.114 - - [27/Sep/2026:14:27:21 +0200] "POST /wp-login.php HTTP/1.1" 200 4407 "https://afke ...
show more
135.136.51.114 - - [27/Sep/2026:14:27:21 +0200] "POST /wp-login.php HTTP/1.1" 200 4407 "https://afkewiersma.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
135.136.51.114 - - [27/Sep/2026:14:27:24 +0200] "POST /wp-login.php HTTP/1.1" 200 4420 "https://afkewiersma.nl/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
135.136.51.114 - - [27/Sep/2026:14:27:38 +0200] "POST /wp-login.php HTTP/1.1" 200 4419 "https://afkewiersma.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
135.136.51.114 - - [27/Sep/2026:14:27:42 +0200] "POST /wp-login.php HTTP/1.1" 200 4420 "https://afkewiersma.nl/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
135.136.51.114 - - [27/Sep/2026:14:27:44 +02
...
show less
Web App Attack
Brute-Force
๐ฆ๐บ
paulshipley.com.au
2026-09-27 11:11:42
(19 hours ago)
levellapromotions.com.au:443 135.136.51.114 - - [27/Sep/2026:21:11:35 +1000] "GET /?author=1 HTTP/1. ...
show more
levellapromotions.com.au:443 135.136.51.114 - - [27/Sep/2026:21:11:35 +1000] "GET /?author=1 HTTP/1.1" 404 75318 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-09-27 10:51:00
(19 hours ago)
levellapromotions.com.au:443 135.136.51.114 - - [27/Sep/2026:20:50:49 +1000] "GET /?author=1 HTTP/1. ...
show more
levellapromotions.com.au:443 135.136.51.114 - - [27/Sep/2026:20:50:49 +1000] "GET /?author=1 HTTP/1.1" 404 82017 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฌ๐ง
catalink.com
2026-09-27 10:27:19
(20 hours ago)
Brute forcing Wordpress login
Exploited Host
Web App Attack
Anonymous
2026-09-27 09:55:20
(20 hours ago)
Fail2Ban - Nginx Bot Probes
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 09:26:52
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 135.136.51.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 135.136.51.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 05:26:47.787900 2026] [security2:error] [pid 24622:tid 24622] [client 135.136.51.114:63786] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||targetbinario.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "targetbinario.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arjhVyGHACabbUXng7YR7wAAAAA"], referer: https://wordpress.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-09-27 08:17:59
(22 hours ago)
(wp_login_try) srv104 WordPress Login Brute Force 135.136.51.114 (CZ/Czechia/-): 20 in the last 3600 ...
show more
(wp_login_try) srv104 WordPress Login Brute Force 135.136.51.114 (CZ/Czechia/-): 20 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐ฉ๐ช
konseptit
2026-09-27 07:41:37
(23 hours ago)
(wordpress) Failed wordpress login from 135.136.51.114 (RO/Romania/-)
Brute-Force
๐บ๐ธ
jormaster3k
2026-09-27 06:30:00
(1 day ago)
Attack against WordPress
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 04:53:41
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 135.136.51.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 135.136.51.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 00:53:33.859174 2026] [security2:error] [pid 17007:tid 17007] [client 135.136.51.114:59250] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lenorasflowers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lenorasflowers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arihTZ7CsTy0zKENPw6trQAAACI"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
COMAITE
2026-09-27 04:38:09
(1 day ago)
CMS (WordPress or Joomla) brute force attempt.
Web App Attack
๐ง๐ช
cmbplf
2026-09-27 04:37:53
(1 day ago)
15.245 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
๐ช๐ธ
ofm-abuse
2026-09-27 03:31:52
(1 day ago)
Brute-force
...
Brute-Force
Web App Attack
Bad Web Bot