🇩🇪
MusicLibrary
2026-06-01 21:28:35
(4 days ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇺🇸
webgobe
2026-03-18 10:58:47
(2 months ago)
jow-Joomla User : try to access forms...
Hacking
2026-02-20 07:52:27
(3 months ago)
Forum/form spam
Web Spam
🇫🇷
tilellit.pro
2026-02-13 16:51:46
(3 months ago)
Fail2Ban banned 45.136.26.25 for security violations in jail wp-armour. Log: 2026/02/13 16:51:46 [er ...
show more
Fail2Ban banned 45.136.26.25 for security violations in jail wp-armour. Log: 2026/02/13 16:51:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.136.26.25 | Target: wplogin" , client: 45.136.26.25, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇧🇪
voormedia
2026-02-09 05:09:14
(3 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇩🇪
MusicLibrary
2026-02-08 21:09:53
(3 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇪🇸
el-brujo
2026-02-05 13:35:48
(4 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:146.0) Gecko/20100101 Firefox/146.0 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-02-05T13:35:48Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-02-03 08:33:29
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 45.136.26.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.26.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 03:33:25.128308 2026] [security2:error] [pid 2794:tid 2794] [client 45.136.26.25:57599] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||teamconnell.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "teamconnell.com"] [uri "/"] [unique_id "aYGy1fKlcTypP1bjm9leAwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-01-26 20:53:12
(4 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇪🇸
10dencehispahard SL
2026-01-16 06:20:14
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2025-12-28 19:33:24
(5 months ago)
multiple unauthorized attempts at Sun, 28 Dec 2025 14:34:14 +0000 a total of 2 times.
Brute-Force
2025-12-27 02:20:23
(5 months ago)
Forum/form spam
Web Spam
🇺🇸
nowyouknow
2025-12-16 16:51:57
(5 months ago)
(From [email protected] ) Hi Team,
I typed your main service keywords into Google tod ...
show more
(From [email protected] ) Hi Team,
I typed your main service keywords into Google today, and I noticed something frustrating. Your website is professionally designed, but it’s buried on Page 2.
Meanwhile, 2 or 3 of your direct competitors, who frankly have weaker websites than you—are sitting at the top of Page 1.
They are effectively "stealing" leads that were looking for you. They aren't better than you; they just have better SEO signals.
I’ve already analyzed exactly what they are doing differently.
If you want to see the comparison report, just reply "Yes" and I’ll send it over.
Cheers,
PMP
show less
Phishing
Web Spam
2025-11-24 15:29:50
(6 months ago)
multiple unauthorized attempts at Sat, 22 Nov 2025 08:20:38 +0000 a total of 1 times.
Brute-Force
🇺🇸
TPI-Abuse
2025-11-23 02:44:15
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 45.136.26.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.26.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 22 21:44:08.279486 2025] [security2:error] [pid 26507:tid 26521] [client 45.136.26.25:43733] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||transitionalcareservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transitionalcareservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSJ0-K20nMqA5cYoUcZwbgAAAMw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack