🇨🇦
zXero
2026-06-18 21:07:40
(4 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-06-09 12:52:11
(2 weeks ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-06-03 12:28:27
(2 weeks ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-05-29 12:22:53
(3 weeks ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇮🇳
evicky2002
2026-05-13 07:18:32
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇧🇪
taivas.nl
2026-05-13 04:32:23
(1 month ago)
Many_bad_calls
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-12 22:04:43
(1 month ago)
Auto-ban: 11 malicious requests on 2026-05-11 (e.g., env/backup probes, brute-force, or error bursts ...
show more
Auto-ban: 11 malicious requests on 2026-05-11 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-12 16:09:31
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 144.76.215.54 (static.54.215.76.144.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 144.76.215.54 (static.54.215.76.144.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:09:26.900111 2026] [security2:error] [pid 11274:tid 11274] [client 144.76.215.54:49016] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wurkroom.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wurkroom.biz"] [uri "/wp-json/wp/v2/users"] [unique_id "agNQtkVrc2tes2KVhON6JgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Axel
2026-05-12 15:35:00
(1 month ago)
Blocked by ModSecurity. Rule ID: 225170 Message: COMODO WAF: Sensitive Information Disclosure Vulner ...
show more
Blocked by ModSecurity. Rule ID: 225170 Message: COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||catboy.host|F|2 Phase: 2 Severity: CRITICAL URI: /wp-json/wp/v2/users Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
omc
2026-05-12 14:04:55
(1 month ago)
Blacklisted client denied access [PP]
Bad Web Bot
🇺🇸
CollideTech
2026-05-12 11:38:08
(1 month ago)
probing for vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 11:36:34
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 144.76.215.54 (static.54.215.76.144.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 144.76.215.54 (static.54.215.76.144.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 07:36:29.061505 2026] [security2:error] [pid 17229:tid 17229] [client 144.76.215.54:41472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||margroberts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "margroberts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agMQvUJQ7UWkxzuWgZ7A8QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-12 11:26:21
(1 month ago)
(caddyscan) Scanner path probe from 144.76.215.54 (DE/Germany/static.54.215.76.144.clients.your-serv ...
show more
(caddyscan) Scanner path probe from 144.76.215.54 (DE/Germany/static.54.215.76.144.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 144.76.215.54 - - [12/May/2026:11:22:36 +0000] "GET /xmlrpc.php HTTP/1.1"
[REDACTED] 200 2627 144.76.215.54 - - [12/May/2026:11:22:37 +0000] "GET /wp-admin/ HTTP/1.1"
[REDACTED] 200 2627 144.76.215.54 - - [12/May/2026:11:22:51 +0000] "GET /wp-login.php HTTP/1.1"
[REDACTED] 200 2627 144.76.215.54 - - [12/May/2026:11:26:21 +0000] "GET /wp-login.php HTTP/1.1"
[REDACTED] 200 2627 144.76.215.54 - - [12/May/2026:11:26:21 +0000] "GET /wp-admin/ HTTP/1.1"
show less
Port Scan
🇨🇦
zXero
2026-05-12 11:09:10
(1 month ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇺🇸
TPI-Abuse
2026-05-12 10:47:18
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 144.76.215.54 (static.54.215.76.144.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 144.76.215.54 (static.54.215.76.144.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 06:47:13.378537 2026] [security2:error] [pid 17398:tid 17398] [client 144.76.215.54:41514] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tomartsmedia.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tomartsmedia.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agMFMedB5k97dfY6ZtyukQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack