🇺🇸
lostswordfish.com
2026-07-09 12:40:05
(1 day ago)
Wordfence waf block on uvfousor WPIDD
Web App Attack
🇩🇪
4server
2026-07-09 04:23:19
(1 day ago)
[ThuJul0906:23:17.0710662026][security2:error][pid3628261:tid3628276][client136.144.33.93:0]ModSecur ...
show more
[ThuJul0906:23:17.0710662026][security2:error][pid3628261:tid3628276][client136.144.33.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.agilityrossoblu.ch\"][uri\"/wp-login.php\"][unique_id\"ak8iNQG4E6KwZaZU7rpkEwAAAAM\"]\,referer:https://www.agilityrossoblu.ch/wp-admin/
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
Lino Project
2026-07-09 01:14:26
(2 days ago)
136.144.33.93 - - [09/Jul/2026:03:14:23 +0200] "POST /admin HTTP/1.1" 302 812 "http://www.tedstore.i ...
show more
136.144.33.93 - - [09/Jul/2026:03:14:23 +0200] "POST /admin HTTP/1.1" 302 812 "http://www.tedstore.it/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-08 06:46:49
(2 days ago)
Failed Wordpress Logins
Web App Attack
🇫🇮
inlink.ltd
2026-07-07 12:57:48
(3 days ago)
Known malicious PHP file or CMS probe
Web App Attack
🇫🇷
dynamix
2026-07-07 06:08:38
(3 days ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-07-07 05:03:41
(3 days ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
US/United States/-
Web App Attack
🇨🇦
KIsmay
2026-07-07 00:20:46
(4 days ago)
Jul 6 18:43:51 www4 WPAudit[470965]: 136.144.33.93 katharinedickerson.com "Mozilla/5.0 (Windows NT ...
show more
Jul 6 18:43:51 www4 WPAudit[470965]: 136.144.33.93 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" katharined:katharinedkatharined FAIL
Jul 6 18:51:40 www4 WPAudit[471472]: 136.144.33.93 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" Katharine:pass FAIL
Jul 6 19:11:02 www4 WPAudit[473098]: 136.144.33.93 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" SBD:user%02 FAIL
Jul 6 19:34:12 www4 WPAudit[474706]: 136.144.33.93 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" SBD:SBDSBD FAIL
Jul 6 20:20:45 www4 WPAudit[477990]: 136.144.33.93 katharinedickerson.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" katharined:katharined2019 FAIL
...
show less
Brute-Force
Web App Attack
2026-06-26 02:38:44
(2 weeks ago)
Failed Wordpress Logins
Web App Attack
2026-06-12 22:46:06
(4 weeks ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 14:51:26
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.144.33.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.144.33.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:51:21.555908 2026] [security2:error] [pid 3463:tid 3463] [client 136.144.33.93:40099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wisdomsco.systemcapacityoptimization.com"] [uri "/.env"] [unique_id "aiwc6cCtNnxt_NpxHNmIKQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 14:29:47
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.144.33.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.144.33.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:29:39.963791 2026] [security2:error] [pid 3515:tid 3515] [client 136.144.33.93:25817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gapanda.com"] [uri "/.env"] [unique_id "aiwX03Pn6pxjb69xyWYWRwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 13:27:56
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.144.33.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.144.33.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 09:27:49.705566 2026] [security2:error] [pid 7233:tid 7233] [client 136.144.33.93:30079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.urrguide.com.coolingsprings.org"] [uri "/.env"] [unique_id "aiwJVTn3KrGOkhyciwX1ogAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-06-05 03:45:05
(1 month ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
2026-06-04 20:23:47
(1 month ago)
Failed Wordpress Logins
Web App Attack