🇺🇸
TPI-Abuse
2026-10-22 15:03:44
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 212.73.159.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.73.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:03:39.456816 2026] [security2:error] [pid 8689:tid 8689] [client 212.73.159.31:56172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||xcarsubscription.com.bamedica.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "xcarsubscription.com.bamedica.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atolyy_pOK8G1InUhjaW7QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-22 05:51:11
(17 hours ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)
Hacking
🇩🇪
maxpower
2026-10-21 18:03:34
(1 day ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 212.73.159.31 (BG/Bulgaria/-): 1 in the last 3 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 212.73.159.31 (BG/Bulgaria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 212.73.159.31 - - [21/Oct/2026:20:03:31 +0200] "GET /wp-json/wp/v2/users?per_page=100&_fields=slug,locale HTTP/2.0" 200 40 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "212.73.159.31" host=www.lidotrocadero.com
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-21 10:20:22
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 212.73.159.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.73.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:20:13.998628 2026] [security2:error] [pid 17368:tid 17428] [client 212.73.159.31:38153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||almerirock.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "almerirock.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atiR3TorW-NMYRTHJTd97wAAAY8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-20 18:51:38
(2 days ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 | 2026-10-20 18:51 UTC
show less
Bad Web Bot
🇮🇹
CoreTech srl
2026-10-20 12:48:56
(2 days ago)
cloudlinux2 fail2ban: 2026-10-20 14:43:52,039 fail2ban.filter [1957]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-20 14:43:52,039 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 182.191.93.131 - 2026-10-20 14:43:52cloudlinux2 fail2ban: 2026-10-20 14:44:02,651 fail2ban.actions [1957]: NOTICE [plesk-modsecurity] Ban 182.191.93.131cloudlinux2 fail2ban: 2026-10-20 14:44:02,645 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 182.191.93.131 - 2026-10-20 14:44:02cloudlinux2 fail2ban: 2026-10-20 14:44:02,672 fail2ban.filter [1957]: INFO [recidive] Found 182.191.93.131 - 2026-10-20 14:44:02cloudlinux2 fail2ban: 2026-10-20 14:44:16,682 fail2ban.actions [1957]: NOTICE [plesk-modsecurity] Unban 34.67.151.10cloudlinux2 fail2ban: 2026-10-20 14:44:11,061 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 212.73.159.31 - 2026-10-20 14:44:10cloudlinux2 fail2ban: 2026-10-20 14:44:34,983 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 103.67.54.252 - 2026-10-20 14:44:34cloudlinux2 fail2ban: 2026-10-20 14:45:07,191 fail2
show less
Web App Attack
🇩🇪
LRob
2026-10-19 16:47:11
(3 days ago)
Not following 301 redirects — wasted requests | host: terravox.fr | method: POST | path: /wp-login.p ...
show more
Not following 301 redirects — wasted requests | host: terravox.fr | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 | src_port: 50491
show less
Bad Web Bot
🇩🇪
FeG Deutschland
2026-10-10 04:41:03
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇹🇷
neron
2026-10-09 17:39:07
(1 week ago)
CrowdSec blocked: local/ssh-bruteforce detected via OPNsense firewall
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-10-04 19:08:23
(2 weeks ago)
Try to access /xmlrpc.php
Web App Attack
🇲🇽
octageeks.com
2026-10-04 04:13:37
(2 weeks ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇲🇽
octageeks.com
2026-10-03 04:06:39
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇲🇽
octageeks.com
2026-10-01 04:26:33
(3 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 20:47:09
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 212.73.159.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.73.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:47:03.936741 2026] [security2:error] [pid 15140:tid 15140] [client 212.73.159.31:50308] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artigelisim.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artigelisim.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arwjx5n6peAlqM9XMP6qBQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 07:13:16
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 212.73.159.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.73.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 03:13:10.953397 2026] [security2:error] [pid 15258:tid 15258] [client 212.73.159.31:54860] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||goldcountrygermanamericanclub.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goldcountrygermanamericanclub.org"] [uri "/wp-json/wp/v2/users"] [unique_id "artlBqebf755kumTLeV-JwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack