🇺🇸
mnsf
2026-09-01 13:05:25
(5 hours ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 04:56:10
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:56:04.247068 2026] [security2:error] [pid 9582:tid 9582] [client 139.59.11.219:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rodrigoaldecoa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodrigoaldecoa.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apZa5LsIdBFC2o2wthwyYwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-01 04:46:37
(13 hours ago)
WordPress login brute-force | path: /wp-login.php (+1 more) | 2026-09-01 04:46 UTC
Brute-Force
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-01 04:34:01
(13 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-01 04:23:59
(14 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
2026-09-01 00:10:37
(18 hours ago)
WordPress Brute Force
Hacking
Brute-Force
Web App Attack
🇩🇪
LRob
2026-08-31 23:07:58
(19 hours ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-login.php | 2026-08-31 23:07 UTC
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-08-31 22:50:53
(19 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇫🇷
tecnicorioja
2026-08-31 22:00:29
(20 hours ago)
wp-login attack [31/Aug/2026:15:02:54
Brute-Force
Web App Attack
🇺🇸
xxkodedxx
2026-08-31 18:12:51
(1 day ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2× edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2× edge-block in 10m window.
Origin: IN / AS14061 DigitalOcean, LLC
Active: 18:12:26→18:12:27 UTC
Volume: 2 HTTP req
Probed: /wp-json/wp/v2/users/me, /wp-login.php
Status mix: 444×2
UA: "139.59.11.219"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 13:27:28
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:27:24.335832 2026] [security2:error] [pid 27417:tid 27417] [client 139.59.11.219:39038] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||futuresgrowhere.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "futuresgrowhere.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apWBPAediJ3MjsEiLrXIfAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
AlexEventfahrtenIPDB
2026-08-31 10:45:05
(1 day ago)
[Mon Aug 31 12:45:03.580987 2026] [authz_core:error] [pid 997685:tid 997704] [remote 139.59.11.219:4 ...
show more
[Mon Aug 31 12:45:03.580987 2026] [authz_core:error] [pid 997685:tid 997704] [remote 139.59.11.219:45104] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php
[Mon Aug 31 12:45:04.588070 2026] [authz_core:error] [pid 997685:tid 997705] [remote 139.59.11.219:45120] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://powerstar.spdns.de/wp-login.php
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 08:01:15
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:01:07.804400 2026] [security2:error] [pid 14789:tid 14789] [client 139.59.11.219:40310] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fundaciondamashcc.org.ec|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fundaciondamashcc.org.ec"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apU0w2YN1WvY5_O95cU0uQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 06:30:38
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:30:33.545192 2026] [security2:error] [pid 2413:tid 2506] [client 139.59.11.219:58414] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||montanatribes.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "montanatribes.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apUfibNZHMbuyS8qR8-iKQAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 04:47:50
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.11.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:47:43.504147 2026] [security2:error] [pid 27503:tid 27503] [client 139.59.11.219:53176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.zost.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.zost.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apUHb6jpjHtTQnS76BS75wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack