πΊπΈ
TPI-Abuse
2025-11-21 12:53:51
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 66.29.146.85 (premium235.web-hosting.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 66.29.146.85 (premium235.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 07:53:46.116014 2025] [security2:error] [pid 19729:tid 19729] [client 66.29.146.85:56922] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dupagekanewildliferemoval.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dupagekanewildliferemoval.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aSBg2qcmSk0yFjOtoOFAagAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
LRob.fr
2025-11-21 11:49:32
(6 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-11-21 10:38:34
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 66.29.146.85 (premium235.web-hosting.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 66.29.146.85 (premium235.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 05:38:27.556702 2025] [security2:error] [pid 20519:tid 20519] [client 66.29.146.85:50502] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.platinummedicalevaluations.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.platinummedicalevaluations.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aSBBIwsTK_6hhVMdp_-RnAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
london2038.com
2025-11-06 17:50:45
(7 months ago)
Attacking WordPress
66.29.146.85 - - [06/Nov/2025:18:50:41 +0100] "POST /wp-login.php HTTP/2.0" 503 ...
show more
Attacking WordPress
66.29.146.85 - - [06/Nov/2025:18:50:41 +0100] "POST /wp-login.php HTTP/2.0" 503 19289 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
π«π·
SpaceHost-Server
2025-11-05 23:43:14
(7 months ago)
Brute-Force
Web App Attack
πΉπ·
rtbh.com.tr
2025-11-05 20:09:45
(7 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
π²πΉ
Malta
2025-11-05 08:03:22
(7 months ago)
66.29.146.85 - - [05/Nov/2025:09:03:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ...
show more
66.29.146.85 - - [05/Nov/2025:09:03:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
πΊπΈ
xmission.com
2025-11-05 05:21:10
(7 months ago)
66.29.146.85 - - [04/Nov/2025:22:21:09 -0700] "POST /wp-login.php HTTP/2.0" 200 2295 "https://dooce. ...
show more
66.29.146.85 - - [04/Nov/2025:22:21:09 -0700] "POST /wp-login.php HTTP/2.0" 200 2295 "https://dooce.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
...
show less
Brute-Force
π¦πΊ
weblite
2025-11-05 01:51:53
(7 months ago)
LONG_RUNNING WP_LOGIN_FAIL
Brute-Force
Web App Attack
π¬π§
thetomtaylor.co.uk
2025-11-04 21:04:55
(7 months ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa01]
Bad Web Bot
Web App Attack
πΉπ·
rtbh.com.tr
2025-11-04 20:09:44
(7 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
Anonymous
2025-11-04 17:25:12
(7 months ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
octageeks.com
2025-11-04 05:08:46
(7 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
π«π·
SpaceHost-Server
2025-11-03 23:43:26
(7 months ago)
Brute-Force
Web App Attack
π²πΉ
Malta
2025-11-03 16:38:22
(7 months ago)
66.29.146.85 - - [03/Nov/2025:17:38:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ...
show more
66.29.146.85 - - [03/Nov/2025:17:38:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack