🇨🇦
SoteriaCovenant
2026-06-09 17:26:46
(1 week ago)
Automated probe: /wp-login.php on Soteria Global infrastructure. No vulnerable software present.
Brute-Force
🇬🇧
andypiper
2026-06-09 01:00:39
(1 week ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-09 00:15:59
(1 week ago)
Login Too Frequent (7)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 23:14:53
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2002:9fdf:5477::9fdf:5477 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:9fdf:5477::9fdf:5477 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 19:14:48.524541 2026] [security2:error] [pid 12465:tid 12465] [client 2002:9fdf:5477::9fdf:5477:49740] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aandbnaturalfoods.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aandbnaturalfoods.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aidM6AK0C1zX1_OrdfVgwgAAAAA"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-06-08 22:52:08
(1 week ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 22:04:36
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 159.223.84.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 159.223.84.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 18:04:32.790420 2026] [security2:error] [pid 30885:tid 30885] [client 159.223.84.119:49401] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agrollum.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agrollum.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aic8cJYREt-jPK358pFdWwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 21:47:06
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2002:9fdf:5477::9fdf:5477 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:9fdf:5477::9fdf:5477 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 17:46:59.915755 2026] [security2:error] [pid 10973:tid 10973] [client 2002:9fdf:5477::9fdf:5477:50085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||advantagept.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "advantagept.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aic4U-Px-l-BEIiabseORAAAAAk"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-08 21:36:34
(1 week ago)
WordPress login attempt
Brute-Force
🇩🇪
LRob.fr
2026-06-08 19:45:06
(1 week ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇪🇸
alferez
2026-06-08 19:16:16
(1 week ago)
Multiple WP Login Attack
Hacking
Exploited Host
Web App Attack
🇩🇪
LRob.fr
2026-06-08 18:45:06
(1 week ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-08 18:43:47
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 159.223.84.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 159.223.84.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 14:43:42.277789 2026] [security2:error] [pid 17911:tid 17911] [client 159.223.84.119:55924] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aemcmullin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aemcmullin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aicNXtDx8PRK7z0sxUD8hwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 17:55:40
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2002:9fdf:5477::9fdf:5477 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:9fdf:5477::9fdf:5477 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 13:55:31.731836 2026] [security2:error] [pid 25088:tid 25088] [client 2002:9fdf:5477::9fdf:5477:52302] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||adona.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adona.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aicCE9m9wRKFPveW9EImTAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
6kilowatti
2026-06-08 17:24:15
(1 week ago)
159.223.84.119 - - [08/Jun/2026:20:24:14 +0300] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.bin ...
show more
159.223.84.119 - - [08/Jun/2026:20:24:14 +0300] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
159.223.84.119 - [08/Jun/2026:20:24:14 +0300] "GET /wp-login.php HTTP/1.1" 404 2048 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 16:42:35
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2002:9fdf:5477::9fdf:5477 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2002:9fdf:5477::9fdf:5477 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 12:42:26.384542 2026] [security2:error] [pid 26813:tid 26813] [client 2002:9fdf:5477::9fdf:5477:56976] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||97films.media|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "97films.media"] [uri "/wp-json/wp/v2/users"] [unique_id "aibw8t_5OsWxOm49YdiJogAAAGI"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack