๐บ๐ธ
lostswordfish.com
2026-09-22 10:10:04
(1 month ago)
Wordfence waf block on fypeducation
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-04 01:58:59
(1 month ago)
cloudlinux2 fail2ban: 2026-09-04 03:54:21,715 fail2ban.filter [1472]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-04 03:54:21,715 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.80.69.73 - 2026-09-04 03:54:21cloudlinux2 fail2ban: 2026-09-04 03:55:15,841 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.46.254.42 - 2026-09-04 03:55:15cloudlinux2 fail2ban: 2026-09-04 03:55:27,242 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 130.211.252.148 - 2026-09-04 03:55:27cloudlinux2 fail2ban: 2026-09-04 03:56:53,960 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 175.139.165.109 - 2026-09-04 03:56:52cloudlinux2 fail2ban: 2026-09-04 03:57:09,165 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 193.19.109.119 - 2026-09-04 03:57:08cloudlinux2 fail2ban: 2026-09-04 03:57:12,219 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 185.223.152.221 - 2026-09-04 03:57:10cloudlinux2 fail2ban: 2026-09-04 03:57:26,763 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 35.189.160.220 - 2026-09-04 03:5
show less
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-01 10:13:58
(1 month ago)
193.19.109.119 - - [01/Sep/2026:12:13:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9508 "-" "Mozilla/ ...
show more
193.19.109.119 - - [01/Sep/2026:12:13:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
193.19.109.119 - - [01/Sep/2026:12:13:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
193.19.109.119 - - [01/Sep/2026:12:13:57 +0200] "POST /wp-login.php HTTP/1.1" 200 14076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
show less
Hacking
Web App Attack
๐บ๐ธ
nyt
2026-07-19 19:07:24
(3 months ago)
WP Author Enumeration, WP User Enumeration
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-15 20:59:45
(3 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ฆ๐บ
afleventoffice.com.au
2026-07-13 22:19:52
(3 months ago)
GET /wp-login.php HTTP/1.1
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-13 05:29:55
(3 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-10 07:12:46
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.19.109.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.19.109.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 03:12:43.044233 2026] [security2:error] [pid 1154:tid 1154] [client 193.19.109.119:49007] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||phoboschildren.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "phoboschildren.com"] [uri "/game/wp-json/wp/v2/users/"] [unique_id "alCba6ZKi5jcvkFYm5-HbwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-10 04:34:13
(3 months ago)
Blocked by ModSec and CSF
Port Scan
๐บ๐ธ
TPI-Abuse
2026-07-10 04:03:10
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.19.109.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.19.109.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 00:03:04.004755 2026] [security2:error] [pid 1052:tid 1052] [client 193.19.109.119:33605] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brandoncomputergeeks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brandoncomputergeeks.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alBu-J8Px-QCcPJYZoAi6QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
factor1
2026-07-01 14:42:44
(3 months ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
๐บ๐ธ
ambor
2026-06-11 04:25:21
(4 months ago)
Honeypot triggered: /wp-login.php on ifebridge.com. User-Agent: Mozilla/5.0. Method: POST
Web App Attack
๐บ๐ธ
dtorrer
2026-06-11 02:18:01
(4 months ago)
Brute-force general attack.
Brute-Force
๐ฉ๐ช
LRob
2026-06-11 00:15:06
(4 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
๐บ๐ธ
Jason Howell
2026-06-08 05:56:31
(4 months ago)
193.19.109.119 - - [08/Jun/2026:00:02:37 -0500] "POST /wp-login.php HTTP/1.1" 200 2654 "-" "Mozilla/ ...
show more
193.19.109.119 - - [08/Jun/2026:00:02:37 -0500] "POST /wp-login.php HTTP/1.1" 200 2654 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
193.19.109.119 - - [08/Jun/2026:00:06:11 -0500] "POST /wp-login.php HTTP/1.1" 200 4910 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
193.19.109.119 - - [08/Jun/2026:00:50:13 -0500] "POST /wp-login.php HTTP/1.1" 200 4914 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
193.19.109.119 - - [08/Jun/2026:00:53:40 -0500] "POST /wp-login.php HTTP/1.1" 200 4609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
193.19.109.119 - - [08/Jun/2026:00:56:30 -0500] "POST /wp-login.php HTTP/1.1" 200 4606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
...
show less
Web App Attack