🇩🇪
LRob
2026-07-02 07:47:57
(12 hours ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇫🇷
dynamix
2026-07-02 06:12:37
(14 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-07-02 05:28:11
(15 hours ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇳🇿
Antinson
2026-07-02 04:20:39
(16 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇩🇪
SCHAPPY
2026-07-02 00:32:34
(20 hours ago)
Mutliple attempts to access forbidden web resources, HTTP code 403.
Web App Attack
2026-07-02 00:32:14
(20 hours ago)
Attac
Brute-Force
🇺🇸
lostswordfish.com
2026-07-01 15:00:06
(1 day ago)
Wordfence waf block on flintlocal432
Web App Attack
🇮🇹
VHosting
2026-07-01 14:45:05
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-07-01 14:03:02
(1 day ago)
trying wp-login.php/xmlrpc.php 36 times in 1 minutes
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 13:58:24
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 09:58:19.342572 2026] [security2:error] [pid 3191:tid 3191] [client 213.139.212.31:52633] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fletcherdouglas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fletcherdouglas.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akUc-xTFVW8hF0uqBYeOXwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 00:30:18
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 20:30:11.749098 2026] [security2:error] [pid 18506:tid 18506] [client 213.139.212.31:57666] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||insidemilb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "insidemilb.com"] [uri "/wp-includes/id3/license.txt/wp-json/wp/v2/users/"] [unique_id "agpdk4PFoQBz1-VK468wWwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 03:33:36
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 23:33:30.643140 2026] [security2:error] [pid 26963:tid 26963] [client 213.139.212.31:53753] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hvacmechanalysis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hvacmechanalysis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "agk3CvC81o1LGsR39xfaTgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 03:10:03
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 23:09:54.731334 2026] [security2:error] [pid 7594:tid 7594] [client 213.139.212.31:60707] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||humbliaslaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "humbliaslaw.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "agkxggVm80p1pOl0-SCaugAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-05-15 22:29:23
(1 month ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 10:14:02
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 213.139.212.31 (213.139.212-31.sinet.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:13:54.832473 2026] [security2:error] [pid 13448:tid 13510] [client 213.139.212.31:57774] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.guitarprimer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.guitarprimer.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "agbx4hEIgPjLLYKU5uKn4QAAAgE"]
show less
Brute-Force
Bad Web Bot
Web App Attack