🇲🇹
Malta
2026-11-15 19:29:22
UTC ·
(6 minutes ago)
193.95.60.12 - - [15/Nov/2026:20:29:21 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-11-13 00:31:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 193.95.60.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 19:31:27.383143 2026] [security2:error] [pid 23343:tid 23343] [client 193.95.60.12:35888] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.95.60.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 19:31:27.383143 2026] [security2:error] [pid 23343:tid 23343] [client 193.95.60.12:35888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||km.digitalsolutions.help|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "km.digitalsolutions.help"] [uri "/wp-json/wp/v2/users"] [unique_id "avZaX3dhkmeZDTPa2jr4kQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
1cyb3rpunk
2026-11-11 16:53:23
UTC ·
(4 days ago)
Coordinated campaign CMP-1794370854-313: 60 IPs sharing an attack fingerprint (admin_panel_probe, attacker_objective_inferred, aws_creds_file_probe, backup_file_probe, cloud_config_probe, config_leak_probe). Observed on sectrace.org honeypot surface.
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
cwytech
2026-11-11 08:41:00
UTC ·
(4 days ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
Anonymous
2026-11-10 10:51:33
UTC ·
(5 days ago)
[ssd5.kdns.gr] httpd-suspicious-path: sites=www.listarxos.gr; logs=/var/log/httpd/domains/listarxos.gr.log; samples=/?author=1&feed=rss2 | /?author=2&feed=rss2
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:48:32
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 193.95.60.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:48:25.399011 2026] [security2:error] [pid 14979:tid 14979] [client 193.95.60.12:54988] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.95.60.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:48:25.399011 2026] [security2:error] [pid 14979:tid 14979] [client 193.95.60.12:54988] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lightupaustralia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lightupaustralia.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "avKiGVrqKyldfQM3jsn1mwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 14:46:36
UTC ·
(1 week ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 06:45:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 193.95.60.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:45:15.171139 2026] [security2:error] [pid 18720:tid 18804] [client 193.95.60.12:56204] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.95.60.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:45:15.171139 2026] [security2:error] [pid 18720:tid 18804] [client 193.95.60.12:56204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||desert-automotive.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desert-automotive.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au13e3q25WKva7IbHT6xfwAAAgI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
IndoAbuse
2026-11-05 23:19:26
UTC ·
(1 week ago)
Wordfence 503 block: Repeated malicious requests and bot attacks blocked by WAF.
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-11-05 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
lostswordfish.com
2026-11-04 20:44:04
UTC ·
(1 week ago)
Wordfence waf block on madesimpleskincare
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 07:33:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 193.95.60.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:33:50.518505 2026] [security2:error] [pid 32058:tid 32058] [client 193.95.60.12:49702] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.95.60.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:33:50.518505 2026] [security2:error] [pid 32058:tid 32058] [client 193.95.60.12:49702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sfgardening.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sfgardening.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "aurf3i_WbYFiLY-q4r9tcAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-04 01:10:06
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-11-03 09:33:27
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.95.60.12
2026-11-03T10:19:30+0100 vpn Access-Reject station: 193.95.60.12
Brute-Force
Web App Attack
🇨🇿
lp
2026-11-02 22:33:17
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.95.60.12
2026-11-02T23:19:58+0100 vpn Access-Reject station: 193.95.60.12
Brute-Force
Web App Attack