🇪🇸
librebit
2026-08-30 08:42:36
(38 minutes ago)
Brute force
Brute-Force
🇩🇪
LRob
2026-08-11 00:13:27
(2 weeks ago)
WordPress probing | req: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ...
show more
WordPress probing | req: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
show less
Brute-Force
Web App Attack
🇩🇪
london2038.com
2026-06-17 17:45:37
(2 months ago)
Detected by WP fail2ban
2026-06-17T19:45:37.235624+02:00 wordpress: XML-RPC authentication attempt f ...
show more
Detected by WP fail2ban
2026-06-17T19:45:37.235624+02:00 wordpress: XML-RPC authentication attempt from 155.212.109.38
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 19:02:43
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 15:02:36.821989 2026] [security2:error] [pid 11896:tid 11896] [client 155.212.109.38:50811] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mordesign1.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mordesign1.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixXzKDrGvMGfL6-6y6kngAAABk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-07 15:47:43
(2 months ago)
[SunJun0717:47:38.3583782026][security2:error][pid4036137:tid4036214][client155.212.109.38:0]ModSecu ...
show more
[SunJun0717:47:38.3583782026][security2:error][pid4036137:tid4036214][client155.212.109.38:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fit-easy.com\"][uri\"/xmlrpc.php\"][unique_id\"aiWSmkrCuUTuflhwWapd-AAAAMw\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 08:06:04
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 04:05:59.615000 2026] [security2:error] [pid 15485:tid 15485] [client 155.212.109.38:33335] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bryanbender.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bryanbender.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah_gZ1kAkV9sbolcwt-JwgAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-30 14:13:33
(2 months ago)
FPROCO WEBEXPLOIT 155.212.109.38 (155.212.109.38)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 23:11:15
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 19:11:09.468281 2026] [security2:error] [pid 17506:tid 17506] [client 155.212.109.38:47091] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drumez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drumez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag4_jWYzKeHbCKhhokUYagAAABU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 23:19:12
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 19:19:08.020868 2026] [security2:error] [pid 23822:tid 23822] [client 155.212.109.38:57293] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||alan-ip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alan-ip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agO1bOQ3RM8kwGMwm0SqrgAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-03-27 03:36:19
(5 months ago)
WP User Enumeration, WP Author Enumeration
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:31:44
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:31:38.921708 2026] [security2:error] [pid 25923:tid 25923] [client 155.212.109.38:18019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tedharris.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tedharris.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abzbupRQOce_wbaeab0_JQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 19:52:51
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 15:52:47.146438 2026] [security2:error] [pid 2665:tid 2665] [client 155.212.109.38:39865] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||precisionk-9.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "precisionk-9.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abW8j9nBCxoYbECl1tvypgAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 14:40:13
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.109.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 10:40:07.739927 2026] [security2:error] [pid 8939:tid 8939] [client 155.212.109.38:21347] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||alan-ip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alan-ip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abVzRy6ZuPV1YKOHI62hzgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
