🇩🇪
maxpower
2026-11-13 05:03:44
UTC ·
(2 hours ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 23.233.232.213 (CA/Canada/modemcable213.232-233.23.mc.videotron.ca): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.233.232.213 - - [13/Nov/2026:06:03:40 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 23.233.232.213 (CA/Canada/modemcable213.232-233.23.mc.videotron.ca): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.233.232.213 - - [13/Nov/2026:06:03:40 +0100] "POST /xmlrpc.php HTTP/2.0" 200 4695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" host=keyprint.eu
show less
Port Scan
🇺🇸
lostswordfish.com
2026-11-12 12:20:07
UTC ·
(19 hours ago)
Wordfence waf block on parsol
Web App Attack
🇲🇽
octageeks.com
2026-11-12 05:12:08
UTC ·
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇵🇱
bmino.pl
2026-11-11 12:21:23
UTC ·
(1 day ago)
Autoban IP(2): 23.233.232.213 - Hostname: Le Groupe Videotron Ltee - City: Montreal - Country: Canada - Organization: Videotron Ltee - Reason: POST /xmlrpc.php HTTP/2.0
Web App Attack
🇫🇷
Tilellit.PRO
2026-11-11 08:13:43
UTC ·
(1 day ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇺🇸
TPI-Abuse
2026-11-10 11:17:42
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 23.233.232.213 (modemcable213.232-233.23.mc.videotron.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:17:36.801273 2026] [security2:error] [pid 28256:t ...
show more
(mod_security) mod_security (id:225170) triggered by 23.233.232.213 (modemcable213.232-233.23.mc.videotron.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:17:36.801273 2026] [security2:error] [pid 28256:tid 28256] [client 23.233.232.213:52284] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||saynotoofland.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "saynotoofland.org"] [uri "/wp-json/wp/v2/users"] [unique_id "avL9UFosSBfu-iGawRZLPAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
casascius
2026-11-09 10:47:01
UTC ·
(3 days ago)
Web probe blocked: WordPress scanning on a non-WordPress site, multiple hits including /wp-admin/
Web App Attack
🇩🇪
maxpower
2026-11-06 23:48:26
UTC ·
(6 days ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 23.233.232.213 (CA/Canada/modemcable213.232-233.23.mc.videotron.ca): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.233.232.213 - - [07/Nov/2026:00:48:21 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 23.233.232.213 (CA/Canada/modemcable213.232-233.23.mc.videotron.ca): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.233.232.213 - - [07/Nov/2026:00:48:21 +0100] "GET /wp-json/wp/v2/users/me HTTP/2.0" 401 92 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" host=stefanomarchegiani.com
show less
Port Scan
🇫🇷
ingroscart.it
2026-11-05 05:48:35
UTC ·
(1 week ago)
(wordpress) Failed wordpress login from 23.233.232.213 (CA/Canada/Quebec/Montreal/modemcable213.232-233.23.mc.videotron.ca/[redacted])
Brute-Force
🇨🇿
Countryman
2026-11-05 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-11-04 10:50:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 23.233.232.213 (modemcable213.232-233.23.mc.videotron.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 05:49:58.399069 2026] [security2:error] [pid 11057:t ...
show more
(mod_security) mod_security (id:225170) triggered by 23.233.232.213 (modemcable213.232-233.23.mc.videotron.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 05:49:58.399069 2026] [security2:error] [pid 11057:tid 11057] [client 23.233.232.213:55750] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.solidwasteanalysisgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.solidwasteanalysisgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ausN1nKZCCASUQ_V4zYIGgAAAA8"], referer: https://mail.solidwasteanalysisgroup.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-04 00:51:35
UTC ·
(1 week ago)
[04/Nov/2026:02:51:34 +0200] -- 23.233.232.213 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-admin/ HTTP/1.1
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-11-03 17:33:27
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 23.233.232.213
2026-11-03T18:19:15+0100 vpn Access-Reject station: 23.233.232.213
Brute-Force
Web App Attack
🇪🇸
Mugen
2026-10-30 11:10:11
UTC ·
(1 week ago)
Unauthorized VPN login attempts
Brute-Force
🇺🇸
cwytech
2026-10-30 09:33:30
UTC ·
(1 week ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
