🇳🇿
Antinson
2026-06-04 21:59:29
(6 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇩🇪
konseptit
2026-06-04 04:38:13
(1 week ago)
(wordpress) Failed wordpress login from 159.223.85.108 (SG/Singapore/-)
Brute-Force
🇳🇿
Tripwire
2026-06-03 19:04:24
(1 week ago)
Scanning for exploits - //wp-includes/ID3/license.txt
Web App Attack
🇳🇱
Site.eu
2026-06-03 17:05:16
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇪🇸
pipeline.es
2026-06-03 03:09:22
(1 week ago)
Web scanning / probing for vulnerable paths | URL: /site/wp-includes/wlwmanifest.xml | Evidence: lan ...
show more
Web scanning / probing for vulnerable paths | URL: /site/wp-includes/wlwmanifest.xml | Evidence: landingow.aavv.com 159.223.85.108 - - [03/Jun/2026:05:08:50 +0200] \"GET /site/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 230 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36\" GEOIP_COUNTRY_CODE=SG | ASN: DIGITALOCEAN-ASN | Country: SG
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 23:51:09
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 159.223.85.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 159.223.85.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 19:51:02.005735 2026] [security2:error] [pid 26273:tid 26273] [client 159.223.85.108:53506] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.talkingmess.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.talkingmess.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah9sZjORpKE9tLqsNVzCqQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 19:44:11
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 159.223.85.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 159.223.85.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 15:44:03.931710 2026] [security2:error] [pid 25593:tid 25593] [client 159.223.85.108:63756] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talentstar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah8yg6MXhpaBjrkXgQVrMQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-02 14:10:28
(1 week ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 07:47:36
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 159.223.85.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 159.223.85.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 03:47:32.875108 2026] [security2:error] [pid 28624:tid 28624] [client 159.223.85.108:54855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.takemehomedogrescue.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.takemehomedogrescue.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah6KlH4f0zb3gMCt1jvEDgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-01 22:15:53
(1 week ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇨🇭
Origon
2026-06-01 18:33:59
(1 week ago)
http-probing - IP: 159.223.85.108 - time="2026-06-01T20:33:59+02:00" level=info msg="(555f66b4f6a74 ...
show more
http-probing - IP: 159.223.85.108 - time="2026-06-01T20:33:59+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 159.223.85.108 (SG/14061) : 4h ban on Ip 159.223.85.108" module=db
show less
Web App Attack
🇧🇪
taivas.nl
2026-06-01 13:32:13
(1 week ago)
Wordpress_xmlrpc_attack
Bad Web Bot
🇳🇱
wlt-blocker
2026-06-01 12:52:38
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
🇨🇭
backslash
2026-06-01 12:51:00
(1 week ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-06-01 07:37:09
(1 week ago)
Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=48
Hacking