🇮🇹
CoreTech srl
2026-09-17 01:38:58
(4 hours ago)
cloudlinux2 fail2ban: 2026-09-17 03:33:56,374 fail2ban.filter [1818]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-17 03:33:56,374 fail2ban.filter [1818]: INFO [plesk-wordpress] Found 212.73.158.253 - 2026-09-17 03:33:55cloudlinux2 fail2ban: 2026-09-17 03:34:28,838 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 35.196.55.242 - 2026-09-17 03:34:28cloudlinux2 fail2ban: 2026-09-17 03:34:38,443 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 35.196.55.242 - 2026-09-17 03:34:38cloudlinux2 fail2ban: 2026-09-17 03:34:40,348 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Ban 35.196.55.242cloudlinux2 fail2ban: 2026-09-17 03:34:40,058 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 35.196.55.242 - 2026-09-17 03:34:39cloudlinux2 fail2ban: 2026-09-17 03:34:40,115 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 35.196.55.242 - 2026-09-17 03:34:40cloudlinux2 fail2ban: 2026-09-17 03:34:40,355 fail2ban.filter [1818]: INFO [recidive] Found 35.196.55.242 - 2026-09-17 03:34:40cloudlinux2 fail2ban: 2026-09
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-09-16 09:19:46
(21 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇫🇷
ELYAZ
2026-09-15 20:23:54
(1 day ago)
(wordpress) Failed wordpress login from 212.73.158.253 (BG/Bulgaria/-): (CF_ENABLE)
Brute-Force
🇩🇪
FeG Deutschland
2026-09-14 00:02:33
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-13 18:03:38
(3 days ago)
WordPress login attempt
Brute-Force
🇩🇪
FeG Deutschland
2026-09-12 08:17:21
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
netclix.gr
2026-09-11 09:16:57
(5 days ago)
(wordpress) Failed wordpress login from 212.73.158.253 (BG/Bulgaria/-): (CF_ENABLE)
Brute-Force
🇪🇸
masterguru
2026-09-11 08:31:04
(5 days ago)
*Port Scan* detected from 212.73.158.253 (BG/Bulgaria/-). 11 hits in the last 116 seconds (0-122)
Port Scan
🇮🇹
Progetto1
2026-09-11 05:15:02
(6 days ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-09-09 06:20:29
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 01:11:44
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 212.73.158.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.73.158.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 21:11:35.620532 2026] [security2:error] [pid 31973:tid 31973] [client 212.73.158.253:42407] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dungeonsremastered.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dungeonsremastered.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCyR5EjkJXDSMj_AFl4TwAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 18:41:58
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 212.73.158.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.73.158.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 14:41:53.244612 2026] [security2:error] [pid 4075:tid 4075] [client 212.73.158.253:50455] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||puckerbackbikini.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puckerbackbikini.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqBW8ZVRKcj-t8MjGSqW9AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-08 18:28:36
(1 week ago)
Enumerating paths that do not exist (scanning) | method: GET | path: /wp-login.php | 2026-09-08 18:2 ...
show more
Enumerating paths that do not exist (scanning) | method: GET | path: /wp-login.php | 2026-09-08 18:28 UTC
show less
Port Scan
Web App Attack
🇺🇸
www.winos.me
2026-09-08 14:24:19
(1 week ago)
Scanning for sensitive files/paths: /wp-login.php
Hacking
Web App Attack
🇩🇪
LRob
2026-09-08 11:58:38
(1 week ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-login.php | 2026-09-08 11:58 UTC
show less
Hacking
Web App Attack