🇫🇮
JimArchon72
2026-09-16 00:10:07
(1 week ago)
2026/09/16 00:08:13 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇨🇿
lp
2026-09-15 01:50:55
(1 week ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 31.134.11.135
2026-09-15T03:25:54+02: ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 31.134.11.135
2026-09-15T03:25:54+02:00 vpn Access-Reject 'yasmin' station: 31.134.11.135 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-15T03:27:14+02:00 vpn Access-Reject 'asmidar' station: 31.134.11.135 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-13 09:22:32
(2 weeks ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 31.134.11.135
2026-09-13T11:13:32+02: ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 31.134.11.135
2026-09-13T11:13:32+02:00 vpn Access-Reject '72212390bh' station: 31.134.11.135 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T11:15:05+02:00 vpn Access-Reject '72212237bh' station: 31.134.11.135 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇫🇮
JimArchon72
2026-05-26 04:30:03
(4 months ago)
2026/05/26 04:28:57 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 10:09:25
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 31.134.11.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 31.134.11.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:09:17.456319 2026] [security2:error] [pid 6083:tid 6083] [client 31.134.11.135:26141] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Dandridge 4775/Thumbs.db"] [unique_id "abUzzcwG0Ka8WvoHw43PYwAAAAA"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Dandridge%204775/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-14 07:24:03
(6 months ago)
Bad Web Bot
🇩🇪
MusicLibrary
2026-02-05 08:32:45
(7 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇺🇸
agenciahypelab.com.br
2026-02-04 23:39:48
(7 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-02-02 14:42:35
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.11.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.11.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 09:42:27.509109 2026] [security2:error] [pid 22263:tid 22263] [client 31.134.11.135:37947] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||admin.turedinmobiliaria.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.turedinmobiliaria.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYC307YoXjoUQ2vlKEbobAAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-02 05:16:35
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.11.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.11.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 02 01:16:31.534562 2025] [security2:error] [pid 494:tid 494] [client 31.134.11.135:20729] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vonkugelgen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vonkugelgen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQbpL11gQHcOZXjb1xlG5QAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-10-21 12:30:32
(11 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇸🇪
webbfabriken
2025-10-14 10:42:27
(11 months ago)
Invalid WordPress login attempt
Attack reported by Webbfabiken Security API - WFSecAPI
Brute-Force
