🇸🇪
SkyDancer
2026-06-28 06:08:37
(2 days ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
🇫🇷
SpaceHost-Server
2026-06-27 22:27:03
(2 days ago)
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-06-27 20:25:21
(2 days ago)
(xmlrpc) Apache: Failed xmlrpc access from 168.144.109.61 (SG/Singapore/-): 10 in the last 3600 secs ...
show more
(xmlrpc) Apache: Failed xmlrpc access from 168.144.109.61 (SG/Singapore/-): 10 in the last 3600 secs (0-180)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-27 20:10:18
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 16:10:13.695901 2026] [security2:error] [pid 9186:tid 9186] [client 168.144.109.61:61430] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||anchor07.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "anchor07.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akAuJewBv-kqj7tqkP8NvwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇱
Dolphi
2026-06-27 20:00:03
(2 days ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-06-27 19:56:45
(2 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
🇺🇸
TPI-Abuse
2026-06-27 19:34:13
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 15:34:09.737286 2026] [security2:error] [pid 8499:tid 8499] [client 168.144.109.61:64287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||anamericanabroad.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "anamericanabroad.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akAlsYvkDQPbWzevsUTTlQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-06-27 19:31:22
(2 days ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
🇺🇸
oralunal
2026-06-27 19:29:15
(2 days ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-06-27 19:21:53
(2 days ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 168.144.109.61 (SG/Singapore/-): 3 in the last ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 168.144.109.61 (SG/Singapore/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 168.144.109.61 - - [27/Jun/2026:21:21:43 +0200] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 11331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" host=analisibioenergetica.com
168.144.109.61 - - [27/Jun/2026:21:21:44 +0200] "POST //xmlrpc.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" host=analisibioenergetica.com
168.144.109.61 - - [27/Jun/2026:21:21:44 +0200] "POST //xmlrpc.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" host=analisibioenergetica.com
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-27 18:58:12
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 14:58:08.959231 2026] [security2:error] [pid 7518:tid 7518] [client 168.144.109.61:59873] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||amywoodruff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "amywoodruff.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akAdQDiieeSaz5Kqc0KMygAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2026-06-27 17:50:29
(2 days ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-27 16:15:45
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 12:15:41.814539 2026] [security2:error] [pid 18393:tid 18393] [client 168.144.109.61:63973] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.americanureport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.americanureport.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aj_3LaidrZ8xTnBbg4YoQwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 15:48:55
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 11:48:51.119013 2026] [security2:error] [pid 7904:tid 7904] [client 168.144.109.61:53359] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.americanexportimport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.americanexportimport.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aj_w45nnja7guN7bYYqJiAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 14:12:07
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.109.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 10:12:03.140300 2026] [security2:error] [pid 4314:tid 4350] [client 168.144.109.61:55145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.amazinglips.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.amazinglips.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aj_aM2X-qV-N-4GYnwq1KgAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack