🇪🇸
librebit
2026-07-01 18:48:27
(1 month ago)
Brute force
Brute-Force
🇫🇷
SpaceHost-Server
2026-06-29 22:29:37
(2 months ago)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-06-29 04:30:06
(2 months ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇩🇪
todix
2026-06-29 04:00:15
(2 months ago)
Web App Attack Exploid from 165.22.246.140
Web App Attack
🇮🇪
Jim Keir
2026-06-29 03:13:06
(2 months ago)
2026-06-29 03:13:05 165.22.246.140 File scanning, blocking 165.22.246.140 for 5 minutes
Web App Attack
🇧🇷
Sipo Chutão
2026-06-29 03:00:01
(2 months ago)
/xmlrpc.php?rsd
Hacking
🇬🇧
thetomtaylor.co.uk
2026-06-29 02:05:03
(2 months ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 01:27:04
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 165.22.246.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.246.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 21:26:59.887213 2026] [security2:error] [pid 19431:tid 19431] [client 165.22.246.140:59665] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.badgerkelley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.badgerkelley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akHJ4wMcBmoZhIY7wqqCHAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-06-29 01:07:02
(2 months ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Victor López
2026-06-29 00:26:45
(2 months ago)
babystudio4d.com 165.22.246.140 - - [28/Jun/2026:19:26:40 -0500] "GET //xmlrpc.php?rsd HTTP/1.1" 200 ...
show more
babystudio4d.com 165.22.246.140 - - [28/Jun/2026:19:26:40 -0500] "GET //xmlrpc.php?rsd HTTP/1.1" 200 822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
babystudio4d.com 165.22.246.140 - - [28/Jun/2026:19:26:43 -0500] "POST //xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
babystudio4d.com 165.22.246.140 - - [28/Jun/2026:19:26:44 -0500] "POST //xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
...
show less
Hacking
Web App Attack
🇸🇪
konseptit
2026-06-28 23:52:43
(2 months ago)
(wordpress) Failed wordpress login from 165.22.246.140 (SG/Singapore/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-28 23:28:41
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 165.22.246.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.246.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 19:28:34.688449 2026] [security2:error] [pid 30507:tid 30507] [client 165.22.246.140:62348] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||b2c-llc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "b2c-llc.com"] [uri "/b2c/wp-json/wp/v2/users/"] [unique_id "akGuIkJsYkykHFKuXWNERAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-28 22:26:33
(2 months ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 22:16:35
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 165.22.246.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.246.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 18:16:29.567264 2026] [security2:error] [pid 24767:tid 24767] [client 165.22.246.140:57238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.azcrittergetter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.azcrittergetter.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akGdPaeCa2wnhbUvtaAd3AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-28 22:05:13
(2 months ago)
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=96
Hacking