🇩🇪
LRob.fr
2026-06-26 02:15:02
(3 days ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇺🇸
factor1
2026-06-25 23:59:06
(3 days ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
🇩🇪
LRob.fr
2026-06-25 02:30:14
(4 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-06-24 21:46:04
(4 days ago)
Wordfence waf block on 1105merrystreet
Web App Attack
🇺🇸
factor1
2026-06-24 17:41:33
(5 days ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 04:20:30
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230 ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230.cloudezapp.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 00:20:23.160929 2026] [security2:error] [pid 1506:tid 1506] [client 2600:3c00::f03c:91ff:fe5f:35ef:49328] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.waterjetsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.waterjetsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aji4B6egMbAbptZzXTkqTgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-21 23:26:50
(1 week ago)
[ns41.kdns.gr] httpd-suspicious-path: sites=medisto.gr; logs=/var/log/httpd/domains/medisto.gr.log; ...
show more
[ns41.kdns.gr] httpd-suspicious-path: sites=medisto.gr; logs=/var/log/httpd/domains/medisto.gr.log; samples=/wp-json/wp/v2/users | /?author=1 | /author/admin/
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 15:12:57
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230 ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230.cloudezapp.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 11:12:54.150654 2026] [security2:error] [pid 17581:tid 17581] [client 2600:3c00::f03c:91ff:fe5f:35ef:56366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.stop902.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.stop902.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajf_dmvVshAaxQZD6vnaQAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 03:37:24
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230 ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230.cloudezapp.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 23:37:20.933042 2026] [security2:error] [pid 29626:tid 29626] [client 2600:3c00::f03c:91ff:fe5f:35ef:53070] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.abundancecompany.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abundancecompany.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdccJ2UzoE8rEkwhKi01QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 12:32:29
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230 ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230.cloudezapp.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 08:32:23.290393 2026] [security2:error] [pid 1595:tid 1595] [client 2600:3c00::f03c:91ff:fe5f:35ef:35950] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||major33.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "major33.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajaIV-lt1sVWlnqE6RlX4QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 23:52:44
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230 ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230.cloudezapp.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 19:52:37.077029 2026] [security2:error] [pid 27652:tid 27652] [client 2600:3c00::f03c:91ff:fe5f:35ef:58404] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.doctoredwinalvarez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.doctoredwinalvarez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajMzRVeR_3LwWeH6tu7BYgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 15:57:42
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230 ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230.cloudezapp.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 11:57:35.039962 2026] [security2:error] [pid 3086:tid 3086] [client 2600:3c00::f03c:91ff:fe5f:35ef:53270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.avalderlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.avalderlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajLD7-JtXZmqe-lJ7j1B6QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 23:30:12
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230 ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230.cloudezapp.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 19:30:00.446094 2026] [security2:error] [pid 21946:tid 21946] [client 2600:3c00::f03c:91ff:fe5f:35ef:60576] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.splashstation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.splashstation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajHceI1MiX5z3Fk4wtBPkAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bigwavedave
2026-06-16 12:26:11
(1 week ago)
Wordpress Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 23:34:07
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230 ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c00::f03c:91ff:fe5f:35ef (ip-45-79-32-230.cloudezapp.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 19:33:59.469533 2026] [security2:error] [pid 29476:tid 29583] [client 2600:3c00::f03c:91ff:fe5f:35ef:52324] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.campingcosmetics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.campingcosmetics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajCL51YCVngqpIX6MK7e4wAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack