🇫🇷
dynamix
2026-06-03 14:57:08
(12 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
kosada.com
2026-05-30 13:56:47
(4 days ago)
Web password guessing
Brute-Force
2026-05-26 08:09:12
(1 week ago)
(caddyscan) Scanner path probe from 194.99.26.40 (FI/Finland/-): 5 in the last 3600 secs; Ports: *; ...
show more
(caddyscan) Scanner path probe from 194.99.26.40 (FI/Finland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 194.99.26.40 - - [26/May/2026:08:09:05 +0000] "POST /xmlrpc.php HTTP/1.1"
[REDACTED] 200 2627 194.99.26.40 - - [26/May/2026:08:09:05 +0000] "GET /wp-login.php HTTP/1.1"
[REDACTED] 200 2627 194.99.26.40 - - [26/May/2026:08:09:06 +0000] "GET /wp-login.php HTTP/1.1"
[REDACTED] 200 2627 194.99.26.40 - - [26/May/2026:08:09:09 +0000] "POST /xmlrpc.php HTTP/1.1"
[REDACTED] 200 2627 194.99.26.40 - - [26/May/2026:08:09:10 +0000] "GET /wp-login.php HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-25 22:21:01
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 18:20:53.647620 2026] [security2:error] [pid 23604:tid 23613] [client 194.99.26.40:63393] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pixelpushersdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelpushersdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahTLRaRmjn918lRrHvVWvAAAAQc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-13 05:00:28
(3 weeks ago)
Web password guessing
Brute-Force
🇺🇸
kosada.com
2026-03-18 21:01:04
(2 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-03-06 02:50:48
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 21:50:41.450777 2026] [security2:error] [pid 27676:tid 27676] [client 194.99.26.40:51717] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gadgeteer.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gadgeteer.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aapBAdFn-MRwK93kPlzjYwAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-04 15:33:05
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 10:33:00.224094 2026] [security2:error] [pid 27006:tid 27006] [client 194.99.26.40:64577] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||siczewicz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "siczewicz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aahQrH5yt23hTdHUIMcK-QAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 03:18:17
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 22:18:13.355487 2026] [security2:error] [pid 17335:tid 17335] [client 194.99.26.40:59833] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||creationorevolution.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "creationorevolution.net"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXLodWQ9DOG538FWqMXyTwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 18:02:38
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 13:02:32.455788 2026] [security2:error] [pid 3461674:tid 3461686] [client 194.99.26.40:48627] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pathpointmarketplace.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pathpointmarketplace.click"] [uri "/wp-json/wp/v2/users"] [unique_id "aXJmOC9JENIm1GWSWJSM6QAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 15:57:16
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 10:57:10.478809 2026] [security2:error] [pid 22649:tid 22649] [client 194.99.26.40:61767] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talentstar2025.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar2025.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXJI1kuAT44uu7Xkd4yYDQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-01-19 17:00:14
(4 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇨🇭
backslash
2026-01-18 01:05:03
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-03-30 12:54:43
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/03/30 07:52:28
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-03-28 12:54:22
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/03/28 07:49:29
Port Scan
Brute-Force
Exploited Host
Web App Attack