🇩🇪
Balthasar Morpheus Jörmundur (JKweb Service)
2026-07-23 07:02:40
(1 day ago)
JKweb Security: Severe and dangerous web attack detected. Attacker permanently banned by Fail2Ban.
Port Scan
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-23 04:06:47
(1 day ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇬🇧
Apache
2026-07-22 22:14:08
(2 days ago)
(mod_security) mod_security (id:210410) triggered by 159.26.120.29 (UA/Ukraine/-): 5 in the last 300 ...
show more
(mod_security) mod_security (id:210410) triggered by 159.26.120.29 (UA/Ukraine/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-07-22 19:36:00
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇬🇧
Apache
2026-07-22 18:40:20
(2 days ago)
(mod_security) mod_security (id:210410) triggered by 159.26.120.29 (UA/Ukraine/-): 5 in the last 300 ...
show more
(mod_security) mod_security (id:210410) triggered by 159.26.120.29 (UA/Ukraine/-): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇩🇪
neckaralb-admin.de
2026-07-22 14:00:26
(2 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 11:31:30
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 07:31:25.221826 2026] [security2:error] [pid 672776:tid 672776] [client 159.26.120.29:36907] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.boaredraven.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amCqDf91IWKrK6RMsVb9hwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 09:16:08
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 05:16:03.726666 2026] [security2:error] [pid 4147294:tid 4147294] [client 159.26.120.29:29901] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bluemarineboats.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bluemarineboats.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amCKU6dw-SsfsJ69WKC_6AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-07-22 08:27:15
(2 days ago)
CloudLinux/Plesk alert - host=cloudlinux dominio=bluboxchiusure.it ip=159.26.120.29 richieste=186 ri ...
show more
CloudLinux/Plesk alert - host=cloudlinux dominio=bluboxchiusure.it ip=159.26.120.29 richieste=186 rischio=ALTO score=12 motivi=molte_richieste,molte_post,path_sospetti,poco_statico,dinamico cat_id=21,19,18 periodo=10min
show less
Web App Attack
Bad Web Bot
Brute-Force
🇳🇿
Antinson
2026-07-22 06:53:23
(2 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-22 06:26:45
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 02:26:38.748333 2026] [security2:error] [pid 3978920:tid 3978920] [client 159.26.120.29:61642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blindshine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blindshine.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amBiniDszXm48-WbNEn-dwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 05:41:13
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 01:41:08.257252 2026] [security2:error] [pid 448052:tid 448052] [client 159.26.120.29:65029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.blaslandsporthorses.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.blaslandsporthorses.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amBX9NoOc4-orR980NGQWQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 05:00:25
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 159.26.120.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 01:00:19.454177 2026] [security2:error] [pid 308739:tid 308739] [client 159.26.120.29:4870] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.blackriverarc.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.blackriverarc.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "amBOY2l_aAYeTCbcgPWiFAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-07-22 03:15:42
(2 days ago)
(wordpress) Failed wordpress login from 159.26.120.29 (UA/Ukraine/-)
Brute-Force
🇸🇪
vaia.cloud
2026-07-22 03:15:02
(2 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack