Anonymous
2026-06-27 05:13:37
(23 hours ago)
<jail> banned by fail2ban
Brute-Force
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-06-27 04:13:31
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
Anonymous
2026-06-27 01:46:21
(1 day ago)
Failed Wordpress Logins
Web App Attack
๐ซ๐ท
tecnicorioja
2026-06-26 22:02:40
(1 day ago)
wp-login attack [26/Jun/2026:07:58:07
Brute-Force
Web App Attack
๐ฉ๐ช
stinpriza
2026-06-26 12:12:17
(1 day ago)
Web App Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 10:08:37
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 212.233.219.101 (212-233-219-101.optisprint.net ...
show more
(mod_security) mod_security (id:225170) triggered by 212.233.219.101 (212-233-219-101.optisprint.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 06:08:31.684622 2026] [security2:error] [pid 31240:tid 31240] [client 212.233.219.101:51108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coolcustomweddingproducts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coolcustomweddingproducts.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj5Pn9J3ixMfFWVpfyfmPAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
spamverify.com
2026-06-26 09:59:43
(1 day ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
๐ฉ๐ช
juutis
2026-06-26 09:59:22
(1 day ago)
212.233.219.101 - - [26/Jun/2026:09:36:10 +0200] "POST /wp-login.php HTTP/1.1" 200 9318 "https://www ...
show more
212.233.219.101 - - [26/Jun/2026:09:36:10 +0200] "POST /wp-login.php HTTP/1.1" 200 9318 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
212.233.219.101 - - [26/Jun/2026:10:44:22 +0200] "POST /wp-login.php HTTP/1.1" 200 9299 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
212.233.219.101 - - [26/Jun/2026:11:59:21 +0200] "POST /wp-login.php HTTP/1.1" 200 9318 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Web App Attack
๐ฌ๐ง
BRHosting
2026-06-26 09:57:03
(1 day ago)
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 09:37:53
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 212.233.219.101 (212-233-219-101.optisprint.net ...
show more
(mod_security) mod_security (id:225170) triggered by 212.233.219.101 (212-233-219-101.optisprint.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 05:37:49.151913 2026] [security2:error] [pid 14096:tid 14096] [client 212.233.219.101:34422] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bearssd.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bearssd.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj5IbZwPcrG9wQFg_bc5kQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Yepngo
2026-06-26 09:37:10
(1 day ago)
212.233.219.101 - - [26/Jun/2026:11:04:07 +0200] "POST /wp-login.php HTTP/2.0" 200 11374 "https://ww ...
show more
212.233.219.101 - - [26/Jun/2026:11:04:07 +0200] "POST /wp-login.php HTTP/2.0" 200 11374 "https://www.yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
212.233.219.101 - - [26/Jun/2026:11:37:10 +0200] "POST /wp-login.php HTTP/2.0" 200 11372 "https://blog.yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-06-26 09:25:04
(1 day ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 09:17:20
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 212.233.219.101 (212-233-219-101.optisprint.net ...
show more
(mod_security) mod_security (id:225170) triggered by 212.233.219.101 (212-233-219-101.optisprint.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 05:17:13.253855 2026] [security2:error] [pid 31858:tid 31858] [client 212.233.219.101:60148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gardner.farm.brazilianbottom.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gardner.farm.brazilianbottom.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj5DmX8LGas2ke9o9r1N2wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Mendip_Defender
2026-06-26 09:11:00
(1 day ago)
212.233.219.101 - - [26/Jun/2026:10:10:51 +0100] "GET /wp-login.php HTTP/1.1" 200 7825 "https://wess ...
show more
212.233.219.101 - - [26/Jun/2026:10:10:51 +0100] "GET /wp-login.php HTTP/1.1" 200 7825 "https://wessex4x4response.org.uk/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
212.233.219.101 - - [26/Jun/2026:10:10:53 +0100] "GET /wp-login.php HTTP/1.1" 200 7825 "https://wessex4x4response.org.uk/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
...
show less
Brute-Force
๐ฉ๐ช
Marc
2026-06-26 09:02:26
(1 day ago)
212.233.219.101 - - [26/Jun/2026:08:15:20 +0200] "GET /wp-login.php HTTP/2.0" 200 3926 "-" "Mozilla/ ...
show more
212.233.219.101 - - [26/Jun/2026:08:15:20 +0200] "GET /wp-login.php HTTP/2.0" 200 3926 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 212.233.219.101 - - [26/Jun/2026:10:02:48 +0200] "GET /wp-login.php HTTP/1.1" 200 4230 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 212.233.219.101 - - [26/Jun/2026:10:14:28 +0200] "GET /wp-login.php HTTP/2.0" 200 3457 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 212.233.219.101 - - [26/Jun/2026:10:14:29 +0200] "POST /wp-login.php HTTP/2.0" 200 3293 "https://alsarnsberg.eu/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 212.233.219.101 - - [26/Jun/2026:11:02:25 +0200] "GET /wp-login.php HTTP/2.0" 200 3468 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1
show less
Brute-Force
Web App Attack