๐บ๐ธ
lostswordfish.com
2026-06-25 13:10:06
(6 days ago)
Wordfence waf block on 1105merrystreet
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-25 11:30:05
(6 days ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
๐บ๐ธ
factor1
2026-06-25 03:02:47
(6 days ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-24 21:45:03
(1 week ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-23 23:01:05
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 19:00:58.858345 2026] [security2:error] [pid 958:tid 958] [client 2a03:b0c0:1:d0::514:1001:41334] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.alafiariverrendezvous.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.alafiariverrendezvous.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajsQKrqbprdmWISiWlpawwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-22 20:02:54
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 16:02:47.971621 2026] [security2:error] [pid 29039:tid 29039] [client 2a03:b0c0:1:d0::514:1001:55118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lambert-heating-and-air.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lambert-heating-and-air.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajmU55uPuWD5Y4gvgExaNgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-22 18:58:26
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 14:58:20.696011 2026] [security2:error] [pid 10579:tid 10579] [client 2a03:b0c0:1:d0::514:1001:45828] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.odinathletes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.odinathletes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajmFzOTVTCHjxF8FNaZf_wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-22 18:11:54
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 14:11:47.872496 2026] [security2:error] [pid 32503:tid 32503] [client 2a03:b0c0:1:d0::514:1001:33580] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.haverhillhouse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.haverhillhouse.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajl6455I3rnyLvCUPwiD2wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
Rexikon
2026-06-22 13:00:35
(1 week ago)
2a03:b0c0:1:d0::514:1001 - - [22/Jun/2026:15:00:32 +0200] "POST /wp-login.php HTTP/1.1" 200 16376 "- ...
show more
2a03:b0c0:1:d0::514:1001 - - [22/Jun/2026:15:00:32 +0200] "POST /wp-login.php HTTP/1.1" 200 16376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
2a03:b0c0:1:d0::514:1001 - - [22/Jun/2026:15:00:32 +0200] "POST /wp-login.php HTTP/1.1" 200 16376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
2a03:b0c0:1:d0::514:1001 - - [22/Jun/2026:15:00:33 +0200] "POST /wp-login.php HTTP/1.1" 200 16380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
2a03:b0c0:1:d0::514:1001 - - [22/Jun/2026:15:00:33 +0200] "POST /wp-login.php HTTP/1.1" 200 16376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:48.0) Gecko/20100101 Firefox/48.0"
2a03:b0c0:1:d0::514:1001 - - [22/Jun/2026:15:00:33 +0200] "POST /wp-login.php HTTP/1.1" 200 16376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0"
...
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-22 08:12:30
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 04:12:24.220848 2026] [security2:error] [pid 28331:tid 28331] [client 2a03:b0c0:1:d0::514:1001:45598] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||websitesforauthors.design|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "websitesforauthors.design"] [uri "/wp-json/wp/v2/users"] [unique_id "ajjuaL_DveVYLRRc__7i7gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-22 05:47:10
(1 week ago)
Attac
Brute-Force
๐ฉ๐ช
konseptit
2026-06-22 03:41:39
(1 week ago)
(wordpress) Failed wordpress login from 2a03:b0c0:1:d0::514:1001 (GB/United Kingdom/lon2.paulwebdesi ...
show more
(wordpress) Failed wordpress login from 2a03:b0c0:1:d0::514:1001 (GB/United Kingdom/lon2.paulwebdesign.uk)
show less
Brute-Force
๐ณ๐ฑ
Site.eu
2026-06-22 01:36:05
(1 week ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-21 22:49:44
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:b0c0:1:d0::514:1001 (lon2.paulwebdesign.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 18:49:37.324963 2026] [security2:error] [pid 16225:tid 16225] [client 2a03:b0c0:1:d0::514:1001:54514] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vzan.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vzan.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajhqgWU_iYB0upLZmeIuVgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Brict IT
2026-06-21 20:37:48
(1 week ago)
Bad Web Bot
Web App Attack