🇧🇪
cmbplf
2026-09-03 15:05:05
(1 hour ago)
7.092 requests in 1 hour (1mo3w2d)
Brute-Force
Bad Web Bot
🇩🇪
ger-stg-sifi1
2026-09-03 12:57:32
(3 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 11:48:37
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 144.126.152.63 (mail.majcionner.info): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 144.126.152.63 (mail.majcionner.info): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 07:48:31.666339 2026] [security2:error] [pid 4308:tid 4308] [client 144.126.152.63:53632] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||furbabieslivesmatter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "furbabieslivesmatter.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aplej_jeyWM0HoDe_PZYtgAAAHI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 08:07:49
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 144.126.152.63 (mail.majcionner.info): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 144.126.152.63 (mail.majcionner.info): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 04:07:42.977871 2026] [security2:error] [pid 21834:tid 21834] [client 144.126.152.63:62280] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fundingworkingcapital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fundingworkingcapital.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apkqzm32CjBQcK1Ga180GwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tentwentyfour
2026-09-03 06:57:41
(9 hours ago)
Blocked for brute-forcing WordPress log-in
Brute-Force
Web App Attack
🇦🇹
penguin-solutions.at
2026-09-03 03:41:50
(12 hours ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-09-03 01:26:32
(14 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-03 00:01:18
(16 hours ago)
(wp_login_try) srv103 WordPress Login Brute Force 144.126.152.63 (US/United States/mail.majcionner.i ...
show more
(wp_login_try) srv103 WordPress Login Brute Force 144.126.152.63 (US/United States/mail.majcionner.info): 20 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 23:29:41
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 144.126.152.63 (mail.majcionner.info): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 144.126.152.63 (mail.majcionner.info): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 19:29:33.785969 2026] [security2:error] [pid 11220:tid 11285] [client 144.126.152.63:54985] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbestcarting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbestcarting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apixXf1PFYKXcBTRhO5gMAAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-02 23:25:01
(16 hours ago)
crowdsecurity/http-bf-wordpress_bf
Brute-Force
Web App Attack
🇪🇸
alferez
2026-09-02 22:32:58
(17 hours ago)
Multiple WP Login Attack
Hacking
Exploited Host
Web App Attack
🇫🇮
bittiguru.fi
2026-09-02 21:23:16
(18 hours ago)
144.126.152.63 - [03/Sep/2026:00:21:48 +0300] "POST /wp-login.php HTTP/1.1" 403 2338 "https://energi ...
show more
144.126.152.63 - [03/Sep/2026:00:21:48 +0300] "POST /wp-login.php HTTP/1.1" 403 2338 "https://energiataloraty.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "2.74"
144.126.152.63 - [03/Sep/2026:00:22:07 +0300] "POST /wp-login.php HTTP/1.1" 404 10078 "https://energiataloraty.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" "3.32"
144.126.152.63 - [03/Sep/2026:00:22:36 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://energiataloraty.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "2.37"
144.126.152.63 - [03/Sep/2026:00:22:56 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://energiataloraty.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "2.37"
144.126.152.63 - [03/Sep/2026:00:23:15 +0300] "POST /wp-login
...
show less
Hacking
Brute-Force
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-16 02:08:01
(2 weeks ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,wa01,wa02]
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-16 01:07:02
(2 weeks ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx02]
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-08 20:08:01
(3 weeks ago)
Fail2Ban - [WEB]Exploit attempts (SQLi, RCE, path traversal) on webexploits ... [ice01,ice02,wa02]
Hacking
SQL Injection
Web App Attack