๐บ๐ธ
TPI-Abuse
2026-10-14 04:18:05
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 136.158.124.37 (37.124.158.136.convergeict.com) ...
show more
(mod_security) mod_security (id:225170) triggered by 136.158.124.37 (37.124.158.136.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:17:59.302117 2026] [security2:error] [pid 25774:tid 25774] [client 136.158.124.37:50421] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lambert-heating-and-air.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lambert-heating-and-air.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as8Cd3zVQTM7ghu1oPAkIwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 11:28:41
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 136.158.124.37 (37.124.158.136.convergeict.com) ...
show more
(mod_security) mod_security (id:225170) triggered by 136.158.124.37 (37.124.158.136.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:28:32.440984 2026] [security2:error] [pid 7807:tid 7807] [client 136.158.124.37:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||repair.cloudex.link|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "repair.cloudex.link"] [uri "/wp-json/wp/v2/users/"] [unique_id "aszEYKDpS9geoNnOG1HS6QAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-10-12 06:30:39
(1 day ago)
Vulnerability scanning | method: GET | path: /wp-json/wp/v2/users
Port Scan
Web App Attack
Anonymous
2026-10-10 14:19:55
(3 days ago)
๐ฅ Web application attack detected. Vulnerability scanning and exploitation attempts identified.
Port Scan
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-09 07:20:15
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐ฉ๐ช
AlexEventfahrtenIPDB
2026-10-03 10:26:53
(1 week ago)
[Sat Oct 03 12:26:50.055843 2026] [authz_core:error] [pid 1155160:tid 1155188] [remote 136.158.124.3 ...
show more
[Sat Oct 03 12:26:50.055843 2026] [authz_core:error] [pid 1155160:tid 1155188] [remote 136.158.124.37:50215] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://powerstar.spdns.de/wp-login.php
[Sat Oct 03 12:26:52.773301 2026] [authz_core:error] [pid 1155160:tid 1155192] [remote 136.158.124.37:50270] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://powerstar.spdns.de/
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
kosada.com
2026-08-01 05:44:57
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-03-08 06:41:52
(7 months ago)
(mod_security) mod_security (id:211030) triggered by 136.158.124.37 (37.124.158.136.convergeict.com) ...
show more
(mod_security) mod_security (id:211030) triggered by 136.158.124.37 (37.124.158.136.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 01:41:48.144247 2026] [security2:error] [pid 8724:tid 8724] [client 136.158.124.37:7658] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||www.genesis-castle.com|F|2"] [data "Matched Data: ('~'||( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/picture.php"] [unique_id "aa0aLNt-CeG2Uy6AMZtcRwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-07-13 04:30:18
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
๐บ๐ธ
TheMadBeaker
2023-08-22 00:33:38
(3 years ago)
Fail2Ban Ban Triggered
Wordpress Attack Attempt
Brute-Force
Web App Attack
๐ฉ๐ช
neverdown.eu
2023-05-21 05:10:28
(3 years ago)
(XMLRPC) WP XMLPRC Attack 136.158.124.37 (PH/Philippines/37.124.158.136.convergeict.com): 1 in the l ...
show more
(XMLRPC) WP XMLPRC Attack 136.158.124.37 (PH/Philippines/37.124.158.136.convergeict.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.158.124.37 - - [21/May/2023:08:03:17 +0300] "POST /xmlrpc.php HTTP/1.1" 301 707 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
show less
Port Scan