🇳🇱
Site.eu
2026-09-28 14:46:51
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇨🇦
KIsmay
2026-09-28 09:54:22
(1 day ago)
2026-09-28T05:54:16.748349-04:00 www4 WPAudit[659970]: 168.144.190.151 imaginesalmon.com "Mozilla/5. ...
show more
2026-09-28T05:54:16.748349-04:00 www4 WPAudit[659970]: 168.144.190.151 imaginesalmon.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" david.pueray:*Pde98&Qfvhh3vvU$ FAIL
2026-09-28T05:54:18.620551-04:00 www4 WPAudit[659970]: 168.144.190.151 imaginesalmon.com "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" seobackup:FsSAj1bKldSAO2@! FAIL
2026-09-28T05:54:19.727363-04:00 www4 WPAudit[659970]: 168.144.190.151 imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" ipapsuic:s-.CmpxSka^If>6JV7;E FAIL
2026-09-28T05:54:20.858206-04:00 www4 WPAudit[659970]: 168.144.190.151 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" adminlin:admin_lin FAIL
2026-09-28T05:54:22.083991-04:00 www4 WPAudit[659970]: 168.144.190.151 imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 05:12:32
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:12:24.473123 2026] [security2:error] [pid 5761:tid 5761] [client 168.144.190.151:63206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cosplayculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cosplayculture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arn3OKEFkoDMZW-z08ykHQAAAAo"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 04:25:42
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 00:25:38.952998 2026] [security2:error] [pid 24460:tid 24460] [client 168.144.190.151:63127] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||incrp.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "incrp.org"] [uri "/wp-json/wp/v2/users"] [unique_id "arnsQsTZrsBOILFViBwR8gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bazter.pro
2026-09-28 02:07:34
(1 day ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-27 18:38:24
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2026-09-27 16:36:02
(2 days ago)
Bot / scanning and/or hacking attempts: GET /wp-admin/index.php HTTP/1.1, POST /wp-login.php HTTP/1. ...
show more
Bot / scanning and/or hacking attempts: GET /wp-admin/index.php HTTP/1.1, POST /wp-login.php HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Feetcoaching.nl%2Fwp
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 06:23:23
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 02:23:16.117361 2026] [security2:error] [pid 11855:tid 11855] [client 168.144.190.151:58521] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ashleycroft.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ashleycroft.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ari2VB_I5jtwugCIRZzmVAAAABQ"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 01:25:45
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 21:25:37.619774 2026] [security2:error] [pid 21793:tid 21793] [client 168.144.190.151:61012] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||computerservicesofflorida.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "computerservicesofflorida.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arhwkZzv651zKcwedrW3YAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-26 20:08:46
(3 days ago)
This address sent web requests that have no legitimate reading: known exploit paths, path traversal, ...
show more
This address sent web requests that have no legitimate reading: known exploit paths, path traversal, injected payloads, or the signature of a vulnerability scanner. This is an attack on the sites we host, blocked on sight. Please check the machine behind it for an attack tool or malware. | method: GET | path: /wp-login.php | 2026-09-26 20:08 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 06:24:17
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 02:24:14.155390 2026] [security2:error] [pid 10068:tid 10068] [client 168.144.190.151:63700] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.idmadventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.idmadventures.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ardlDne_lfLJn8E-2dZi0QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 05:55:29
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 01:55:21.230106 2026] [security2:error] [pid 22758:tid 22758] [client 168.144.190.151:63144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.creationorevolution.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.creationorevolution.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ardeSSrK5VkIeBvjUe0TrQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-26 05:16:21
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 02:09:17
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 22:09:12.361885 2026] [security2:error] [pid 5055:tid 5055] [client 168.144.190.151:59268] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cmcnow.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cmcnow.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arcpSMhcJk7FGJNlgTPWGAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 23:21:32
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 168.144.190.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 19:21:28.002815 2026] [security2:error] [pid 4147:tid 4147] [client 168.144.190.151:51620] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||crcponcha.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crcponcha.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arcB9wWnXwN-tfYsrhUHhAAAABs"], referer: https://wordpress.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
