🇺🇸
TPI-Abuse
2026-06-06 23:35:13
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 216.24.219.135 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.24.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 19:35:05.154236 2026] [security2:error] [pid 16013:tid 16013] [client 216.24.219.135:35779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evelia.com"] [uri "/wp-includes/images/wp-config.php"] [unique_id "aiSuqTuGDplyGEEOiqMLGwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-06 22:25:35
(2 weeks ago)
Aggressive web search of vulnerable pages: /wp-login.php /wp-admin/panel.php /wp-content/chand.php / ...
show more
Aggressive web search of vulnerable pages: /wp-login.php /wp-admin/panel.php /wp-content/chand.php /licenses/images/widgets/ /wp-includes/inter ...
show less
Web App Attack
🇳🇱
EGP Abuse Dept
2026-06-06 01:41:58
(2 weeks ago)
Scanning for web/db/file exploits on www.evenementenkleding.nl
SQL Injection
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-06-05 19:20:21
(3 weeks ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
gadix
2026-06-05 00:39:45
(3 weeks ago)
216.24.219.135 - - [04/Jun/2026:22:44:40 +0200] "POST /wp-login.php HTTP/1.1" 200 16403 "-" "Mozilla ...
show more
216.24.219.135 - - [04/Jun/2026:22:44:40 +0200] "POST /wp-login.php HTTP/1.1" 200 16403 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
216.24.219.135 - - [05/Jun/2026:00:46:18 +0200] "POST /wp-login.php HTTP/1.1" 200 16398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
216.24.219.135 - - [05/Jun/2026:02:39:43 +0200] "POST /wp-login.php HTTP/1.1" 200 16399 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_
...
show less
Web App Attack
2026-06-04 22:04:53
(3 weeks ago)
(caddyscan) Scanner path probe from 216.24.219.135 (US/United States/-): 5 in the last 3600 secs; Po ...
show more
(caddyscan) Scanner path probe from 216.24.219.135 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 216.24.219.135 - - [04/Jun/2026:21:58:10 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1"
[REDACTED] 200 2627 216.24.219.135 - - [04/Jun/2026:21:58:11 +0000] "GET /wp-admin/css/colors/coffee/ HTTP/1.1"
[REDACTED] 200 2627 216.24.219.135 - - [04/Jun/2026:21:58:11 +0000] "GET /xmlrpc.php HTTP/1.1"
[REDACTED] 200 2627 216.24.219.135 - - [04/Jun/2026:21:58:13 +0000] "GET /wp-admin/class.php HTTP/1.1"
[REDACTED] 200 2627 216.24.219.135 - - [04/Jun/2026:22:04:49 +0000] "GET /wp-admin/includes/class-wp-filesystem-ftpsockets-more.php HTTP/1.1"
show less
Port Scan
🇵🇱
tomkolp
2026-06-04 16:32:57
(3 weeks ago)
CrowdSec - Scenario: crowdsecurity/http-wordpress-scan. Duration: 4h.
Web App Attack
Hacking
🇫🇷
Baking333
2026-06-04 14:53:39
(3 weeks ago)
[redacted] 216.24.219.135 - - [04/Jun/2026:15:53:34 +0100] "GET /[redacted] HTTP/1.1" 302 5268 0/957 ...
show more
[redacted] 216.24.219.135 - - [04/Jun/2026:15:53:34 +0100] "GET /[redacted] HTTP/1.1" 302 5268 0/957601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" [redacted] 216.24.219.135 - - [04/Jun/2026:15:53:36 +0100] "GET /wp-admin/ HTTP/1.1" 301 4332 0/291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
show less
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-04 11:02:03
(3 weeks ago)
Restricted File Access Attempt. Matched phrase "wp-config-" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇷🇺
DZBOT
2026-06-04 03:18:56
(3 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
tilellit.pro
2026-05-18 20:44:21
(1 month ago)
Fail2Ban banned 216.24.219.135 for security violations in jail wp-armour. Log: 2026/05/18 20:44:20 [ ...
show more
Fail2Ban banned 216.24.219.135 for security violations in jail wp-armour. Log: 2026/05/18 20:44:20 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 216.24.219.135 | Target: wplogin" , client: 216.24.219.135, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "http://comerciogallego.es/wp-admin/"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-05-18 10:40:13
(1 month ago)
Fail2Ban banned 216.24.219.135 for security violations in jail wp-armour. Log: 2026/05/18 10:40:12 [ ...
show more
Fail2Ban banned 216.24.219.135 for security violations in jail wp-armour. Log: 2026/05/18 10:40:12 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 216.24.219.135 | Target: wplogin" , client: 216.24.219.135, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-admin/"
...
show less
Web Spam
🇮🇹
VHosting
2026-02-18 23:10:25
(4 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇳🇱
i-turnradio.nl
2026-02-08 14:04:50
(4 months ago)
2026-02-08 @ 15:04:50 (CET) ~ Blocked for trying to access: /wp-login.php
Web App Attack
🇩🇪
LRob.fr
2026-02-05 08:20:03
(4 months ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking