๐ฉ๐ช
LRob
2026-10-09 14:08:02
(1 day ago)
Web exploit attempt | method: GET, POST | path: //, //xmlrpc.php | query: author=1, author=2 | ua: M ...
show more
Web exploit attempt | method: GET, POST | path: //, //xmlrpc.php | query: author=1, author=2 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 13:44:51
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 136.87.45.21 (21.45.87.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 136.87.45.21 (21.45.87.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 09:44:48.677102 2026] [security2:error] [pid 9719:tid 9719] [client 136.87.45.21:56709] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.odinathletes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.odinathletes.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asjv0Kb8y5z5Hf2ToE75GAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-09 13:40:26
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ง๐ช
taivas.nl
2026-10-09 13:32:09
(1 day ago)
Bad_requests
Bad Web Bot
Anonymous
2026-10-09 13:19:10
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฎ๐น
CoreTech srl
2026-10-09 13:00:07
(1 day ago)
CloudLinux/Plesk alert - host=cloudlinux dominio=business-central.it ip=136.87.45.21 richieste=69 ri ...
show more
CloudLinux/Plesk alert - host=cloudlinux dominio=business-central.it ip=136.87.45.21 richieste=69 rischio=ALTO score=10 motivi=richieste_elevate,molte_post,path_sospetti,poco_statico,dinamico cat_id=21,19,18 periodo=10min
show less
Web App Attack
Bad Web Bot
Brute-Force
๐ฉ๐ช
BlueWire Hosting
2026-10-09 12:37:46
(1 day ago)
Probing websites for vulnerabilities
Web App Attack
๐ฉ๐ช
maxpower
2026-10-09 12:28:19
(1 day ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.87.45.21 (US/United States/21.45.87.136.bc ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.87.45.21 (US/United States/21.45.87.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.87.45.21 - - [09/Oct/2026:14:28:14 +0200] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 8225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" host=pescarafestival.it
show less
Port Scan
๐ฎ๐ฑ
Dolphi
2026-10-09 12:20:04
(1 day ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
๐บ๐ธ
oralunal
2026-10-09 12:12:54
(1 day ago)
IP banned by Fail2Ban in jail its-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-09 12:10:04
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
maxpower
2026-10-09 12:08:00
(1 day ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.87.45.21 (US/United States/21.45.87.136.bc ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.87.45.21 (US/United States/21.45.87.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.87.45.21 - - [09/Oct/2026:14:07:55 +0200] "GET /wp-json/wp/v2/users/ HTTP/1.1" 200 779 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" host=professionedanza.org
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-10-09 12:05:39
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 136.87.45.21 (21.45.87.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 136.87.45.21 (21.45.87.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 08:05:34.926041 2026] [security2:error] [pid 26096:tid 26096] [client 136.87.45.21:51714] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emsystemsltd.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emsystemsltd.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asjYjvv7ve30Q7RAMNGCXAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack