2026-07-19 19:08:34
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 20:54:47
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 136.144.33.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 136.144.33.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:54:44.390962 2026] [security2:error] [pid 2568:tid 2568] [client 136.144.33.211:63099] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gilgoinn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gilgoinn.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "allFFJuaKvgDR1EB94PNfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-07-16 12:35:24
(5 days ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.144.33.211 (US/United States/-): 1 in the ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.144.33.211 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.144.33.211 - - [16/Jul/2026:14:35:09 +0200] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 18797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" "-" host=www.confartigianato.pe.it
show less
Port Scan
🇫🇷
masterguru
2026-07-16 12:33:09
(5 days ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
🇺🇸
nyt
2026-06-26 23:05:10
(3 weeks ago)
WP Author Enumeration, WP User Enumeration
Web App Attack
🇺🇸
etu brutus
2026-06-26 17:09:05
(3 weeks ago)
136.144.33.211 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-26 16:51:03
(3 weeks ago)
Aggressive web search of vulnerable pages: /q-~31pjzFoouLi30pwSu31tt9Is7fCtAzNg37275/ /t.php /wp-inc ...
show more
Aggressive web search of vulnerable pages: /q-~31pjzFoouLi30pwSu31tt9Is7fCtAzNg37275/ /t.php /wp-includes/rest-api/search/images/ /wp-includes/ ...
show less
Web App Attack
🇳🇱
Site.eu
2026-06-21 08:25:52
(1 month ago)
Excessive 404/403 errors
Brute-Force
🇮🇩
sockominfo
2026-06-20 10:00:28
(1 month ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Email Spam
🇬🇷
setupgr
2026-06-17 00:04:06
(1 month ago)
(mod_security) mod_security (id:900001) triggered by 136.144.33.211: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:900001) triggered by 136.144.33.211: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 03:04:06.306525 2026] [security2:error] [pid 2210175:tid 2210236] [client 136.144.33.211:36969] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "doityourself.gr"] [uri "/wp-login.php"] [unique_id "ajHkdn9oGssBgNwsPFsq0QAAAEk"]
show less
Port Scan
🇬🇷
setupgr
2026-06-16 21:20:13
(1 month ago)
(mod_security) mod_security (id:900001) triggered by 136.144.33.211: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:900001) triggered by 136.144.33.211: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 00:20:10.022762 2026] [security2:error] [pid 2210293:tid 2210359] [client 136.144.33.211:32957] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "doityourself.gr"] [uri "/wp-login.php"] [unique_id "ajG-CtMtn8QwdXQy9m6ZPQAAAUE"]
show less
Port Scan
🇬🇷
setupgr
2026-06-16 17:18:21
(1 month ago)
(mod_security) mod_security (id:900001) triggered by 136.144.33.211: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:900001) triggered by 136.144.33.211: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 20:18:19.814086 2026] [security2:error] [pid 2210295:tid 2210437] [client 136.144.33.211:28543] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "doityourself.gr"] [uri "/wp-login.php"] [unique_id "ajGFW4Hi3fYqxwKQHNbYkQAAAc0"]
show less
Port Scan
🇺🇸
integrantservices.com
2026-05-26 03:59:54
(1 month ago)
(wordpress) Failed wordpress login from 136.144.33.211 (US/United States/-)
Brute-Force
🇫🇷
dynamix
2026-05-25 01:24:56
(1 month ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Octopuce
2026-05-23 23:19:41
(1 month ago)
Aggressive web search of vulnerable pages: /wp-login.php /wp-includes/IXR/admin.php /wp-admin/js/ind ...
show more
Aggressive web search of vulnerable pages: /wp-login.php /wp-includes/IXR/admin.php /wp-admin/js/index.php /wp-includes/js/jquery/jquery.php /f ...
show less
Web App Attack