2026-05-27 23:40:22
(1 month ago)
SQL injection, multiple attempts.
SQL Injection
🇺🇸
TPI-Abuse
2026-05-25 04:56:13
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 155.212.36.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.36.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 00:56:09.496305 2026] [security2:error] [pid 14165:tid 14165] [client 155.212.36.215:64973] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||caonabo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "caonabo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahPWaeEevV0xxKiWVBXq-gAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-05-13 17:55:03
(2 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇩🇪
neverdown.eu
2026-05-07 23:41:05
(2 months ago)
(WPLOGIN) WordPress wp-login flood 155.212.36.215 (PL/Poland/-): 3 in the last 60 secs; Ports: *; Di ...
show more
(WPLOGIN) WordPress wp-login flood 155.212.36.215 (PL/Poland/-): 3 in the last 60 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 155.212.36.215 - - [08/May/2026:02:38:29 +0300] "POST /wp-login.php HTTP/1.1" 200 3586 "http://www.cossoftware.ro/wp-login.php" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10"
155.212.36.215 - - [08/May/2026:02:38:31 +0300] "POST /wp-login.php HTTP/1.1" 200 3644 "http://www.cossoftware.ro/wp-login.php" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10"
155.212.36.215 - - [08/May/2026:02:38:33 +0300] "POST /wp-login.php HTTP/1.1" 200 3644 "http://www.cossoftware.ro/wp-login.php" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10"
show less
Port Scan
🇬🇧
noise.agency
2026-05-04 08:02:09
(2 months ago)
(wordpress) Failed wordpress login from 155.212.36.215 (PL/Poland/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-04-09 14:10:48
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.36.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.36.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 10:10:40.620769 2026] [security2:error] [pid 995858:tid 995858] [client 155.212.36.215:14513] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agrisea.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agrisea.net"] [uri "/wp-json/wp/v2/users"] [unique_id "adezYEDCVc0UAmKolEknmQAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-04-05 04:06:09
(3 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇮🇹
VHosting
2026-03-11 07:00:09
(4 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
R.G.
2026-03-08 13:09:11
(4 months ago)
(XMLRPCorWHATEVER) Get lost please 155.212.36.215 (PL/Poland/-): 3 in the last 900 secs; Ports: *; D ...
show more
(XMLRPCorWHATEVER) Get lost please 155.212.36.215 (PL/Poland/-): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇨🇭
backslash
2026-03-07 08:57:00
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-28 11:51:24
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.36.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.36.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 06:51:20.367221 2025] [security2:error] [pid 4154:tid 4154] [client 155.212.36.215:19645] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||prostar.industries|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prostar.industries"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVEZuB4ee4Uo2vczBuAiKAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-25 13:46:44
(6 months ago)
Failed Wordpress login
Hacking
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2025-12-17 23:05:29
(7 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
US/United States/-
Web App Attack
🇺🇸
Jason Howell
2025-12-14 13:43:06
(7 months ago)
155.212.36.215 - - [14/Dec/2025:07:42:54 -0600] "GET /wp-login.php HTTP/1.1" 301 579 "-" "Mozilla/5. ...
show more
155.212.36.215 - - [14/Dec/2025:07:42:54 -0600] "GET /wp-login.php HTTP/1.1" 301 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
155.212.36.215 - - [14/Dec/2025:07:42:57 -0600] "GET /wp-login.php HTTP/1.1" 200 4174 "http://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
155.212.36.215 - - [14/Dec/2025:07:42:59 -0600] "POST /wp-login.php HTTP/1.1" 200 4291 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
155.212.36.215 - - [14/Dec/2025:07:43:00 -0600] "POST /wp-login.php HTTP/1.1" 200 4290 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
155.212.36.215 - - [14/Dec/2025:07:43:01 -0600] "POST /wp-login.php HTTP/1.1" 200 4290 "https://starbuckmachinery.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0)
...
show less
Web App Attack