🇩🇪
stinpriza
2026-06-12 22:59:54
(3 days ago)
Web App Attack
Web App Attack
🇩🇪
LRob.fr
2026-06-09 19:00:10
(6 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 09:38:04
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 05:37:57.656089 2026] [security2:error] [pid 13333:tid 13333] [client 194.99.26.83:27559] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dalore.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dalore.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afsL9TO26qUzMCp6TFFnUAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-02 22:00:42
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 18:00:34.726170 2026] [security2:error] [pid 8746:tid 8746] [client 194.99.26.83:35689] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||BladesOfLegend.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bladesoflegend.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afZ0Ajsk5_2zgcemscyeIwAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-02 21:16:23
(1 month ago)
PARMACOM WEBEXPLOIT 194.99.26.83 (194.99.26.83)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 23:43:13
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 19:43:05.665208 2026] [security2:error] [pid 28878:tid 28878] [client 194.99.26.83:49391] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cruisingforsex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cruisingforsex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afKXidL_f8IKBImyu0m1_AAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-04-28 06:43:19
(1 month ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 07:30:37
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 03:30:32.916791 2026] [security2:error] [pid 2369484:tid 2369484] [client 194.99.26.83:47455] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kerrywood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kerrywood.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adYEGDuRycLbVLVhBVp3OAAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 11:03:52
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 07:03:49.054046 2026] [security2:error] [pid 27364:tid 27364] [client 194.99.26.83:61443] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||scottcarper.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scottcarper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adJBlf-LFkXzEoqWwHrdmQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
SilverZippo
2026-03-29 11:36:29
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
F242
2026-03-28 20:36:30
(2 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-09 18:09:44
(9 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇮🇩
penjaga BRIN
2024-01-23 04:00:47
(2 years ago)
SQL injection attempt.-111
Brute-Force
🇸🇪
maxxsense
2023-12-14 14:18:55
(2 years ago)
(wordpress) Failed wordpress login from 194.99.26.83 (US/United States/-)
Brute-Force
🇦🇺
MAGIC
2023-12-11 02:00:15
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot