🇩🇪
yvoictra
2026-08-04 11:32:31
(4 weeks ago)
Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-probing
Web App Attack
🇩🇪
Bedios GmbH
2026-08-04 11:23:37
(4 weeks ago)
Wordpress hacking attempt
Web App Attack
🇮🇹
CoreTech srl
2026-08-04 11:22:52
(4 weeks ago)
cloudlinux2 fail2ban: 2026-08-04 13:14:11,882 fail2ban.filter [1468]: INFO [plesk-apache] ...
show more
cloudlinux2 fail2ban: 2026-08-04 13:14:11,882 fail2ban.filter [1468]: INFO [plesk-apache] Found 90.253.67.184 - 2026-08-04 13:14:11cloudlinux2 fail2ban: 2026-08-04 13:14:15,576 fail2ban.filter [1468]: INFO [plesk-apache] Found 10.119.252.94 - 2026-08-04 13:14:15cloudlinux2 fail2ban: 2026-08-04 13:14:26,219 fail2ban.filter [1468]: INFO [plesk-modsecurity] Found 182.64.174.202 - 2026-08-04 13:14:26cloudlinux2 fail2ban: 2026-08-04 13:14:47,203 fail2ban.actions [1468]: NOTICE [plesk-modsecurity] Ban 103.205.69.207cloudlinux2 fail2ban: 2026-08-04 13:14:47,210 fail2ban.filter [1468]: INFO [recidive] Found 103.205.69.207 - 2026-08-04 13:14:47cloudlinux2 fail2ban: 2026-08-04 13:14:47,062 fail2ban.filter [1468]: INFO [plesk-modsecurity] Found 103.205.69.207 - 2026-08-04 13:14:46cloudlinux2 fail2ban: 2026-08-04 13:14:58,816 fail2ban.filter [1468]: INFO [plesk-modsecurity] Found 136.107.207.7 - 2026-08-04 13:14:58cloudlinux2 fail2ban: 2026-08-04 1
show less
Brute-Force
2026-08-04 11:19:50
(4 weeks ago)
(wordpress) Failed wordpress login from 136.107.207.7 (US/United States/District of Columbia/Washing ...
show more
(wordpress) Failed wordpress login from 136.107.207.7 (US/United States/District of Columbia/Washington/7.207.107.136.bc.googleusercontent.com/[redacted])
show less
Brute-Force
🇳🇱
Savvii
2026-08-04 11:15:58
(4 weeks ago)
10 attempts against mh-misc-ban on ozone
Web App Attack
🇧🇪
cmbplf
2026-08-04 11:05:12
(4 weeks ago)
17.963 requests in 1 hour (1mo1w6d)
Brute-Force
Bad Web Bot
🇮🇱
Dolphi
2026-08-04 11:02:16
(4 weeks ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 11:01:08
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 136.107.207.7 (7.207.107.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 136.107.207.7 (7.207.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 07:01:00.339189 2026] [security2:error] [pid 1654941:tid 1654941] [client 136.107.207.7:55814] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hotpay.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hotpay.co"] [uri "/wp-json/wp/v2/users/"] [unique_id "anHGbKVZs23QUHNz1OCyBQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-04 10:41:09
(4 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇫🇷
Baking333
2026-08-04 10:39:18
(4 weeks ago)
[redacted] 136.107.207.7 - - [04/Aug/2026:11:39:15 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1 ...
show more
[redacted] 136.107.207.7 - - [04/Aug/2026:11:39:15 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" 302 6773 0/32806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 136.107.207.7 - - [04/Aug/2026:11:39:16 +0100] "GET /[redacted]?rsd HTTP/1.1" 302 1554 0/57279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
Web App Attack
2026-08-04 10:37:29
(4 weeks ago)
Scraping for WordPress
Web App Attack
🇫🇷
tecnoacquisti.com
2026-08-04 10:36:50
(4 weeks ago)
PrestaShop Security Module: WordPress probe path detected
Web App Attack
🇨🇭
backslash
2026-08-04 10:36:00
(4 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
macrob
2026-08-04 10:31:17
(4 weeks ago)
2026/08/04 10:31:15 [error] 1918377#1918377: *444551945 access forbidden by rule, client: 136.107.20 ...
show more
2026/08/04 10:31:15 [error] 1918377#1918377: *444551945 access forbidden by rule, client: 136.107.207.7, server: binixo.lk, request: "GET //wp-includes/ID3/license.txt HTTP/2.0", host: "binixo.lk"
2026/08/04 10:31:16 [error] 1918377#1918377: *444551950 access forbidden by rule, client: 136.107.207.7, server: binixo.ph, request: "GET //wp-includes/ID3/license.txt HTTP/1.1", host: "binixo.ph"
2026/08/04 10:31:16 [error] 1918373#1918373: *444551953 access forbidden by rule, client: 136.107.207.7, server: binixo.mx, request: "GET //wp-includes/ID3/license.txt HTTP/1.1", host: "binixo.mx"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 10:31:11
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 136.107.207.7 (7.207.107.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 136.107.207.7 (7.207.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 06:31:05.983213 2026] [security2:error] [pid 2814290:tid 2814290] [client 136.107.207.7:64797] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||semisysteme.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "semisysteme.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "anG_adsC66kvxt7zMuPeTwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack