๐บ๐ธ
mnsf
2026-10-22 13:05:20
(2 hours ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
2026-10-22 05:05:58
(10 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 17:31:20
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable. ...
show more
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:31:15.247245 2026] [security2:error] [pid 19327:tid 19327] [client 68.149.232.229:60182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thebrotherhoodlounge.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thebrotherhoodlounge.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "atj243qJx56qzNrLJFSEaAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
LRob
2026-10-18 20:02:02
(3 days ago)
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-14 22:51:33
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable. ...
show more
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:51:29.144669 2026] [security2:error] [pid 29826:tid 29842] [client 68.149.232.229:45314] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||killasgarage.bike|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "killasgarage.bike"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atAHcRn1DUMopJd2Za2tbgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 21:30:09
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable. ...
show more
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 17:30:04.513588 2026] [security2:error] [pid 29052:tid 29052] [client 68.149.232.229:53750] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eaglejames.disio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eaglejames.disio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as_0XKCRuZtJfHX07nnGaQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-14 18:52:35
(1 week ago)
[ti-27al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-27al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 68.149.232.229 - - [14/Oct/2026:20:52:02 +0200] "GET /author-sitemap.xml HTTP/1.1" 404 43694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
68.149.232.229 - - [14/Oct/2026:20:52:03 +0200] "GET /wp-json/rankmath/v1/getHead?url=https://www.creativeaction.nl HTTP/1.1" 404 698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
68.149.232.229 - - [14/Oct/2026:20:52:07 +0200] "GET /?author=3&feed=rss2 HTTP/1.1" 404 43904 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
68.149.232.229 - - [14/Oct/2026:20:52
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
Celtic
2026-10-14 17:55:03
(1 week ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-10-13 13:03:35
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable. ...
show more
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 09:03:30.310750 2026] [security2:error] [pid 27383:tid 27383] [client 68.149.232.229:54284] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||astglobaltech.com.greenlight.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "astglobaltech.com.greenlight.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as4sIusvLuDorNW0GIobPwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 07:52:18
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable. ...
show more
(mod_security) mod_security (id:225170) triggered by 68.149.232.229 (S01067013010ff2d2.ed.shawcable.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 03:52:12.587426 2026] [security2:error] [pid 17053:tid 17053] [client 68.149.232.229:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pulleasy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pulleasy.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as3jLPUhvB0e8gQwdL8EYgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
jbcrn
2026-10-10 16:37:16
(1 week ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /fediverse/post/deflagration.pawl/slanderful/Nautilacea/Zuni-estimable/pollywog-amphibion/widowly/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-10-06 04:16:32
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
๐บ๐ธ
nationaleventpros.com
2026-09-25 10:24:30
(3 weeks ago)
WordPress login attempt
Brute-Force
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-25 03:17:27
(3 weeks ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-24 05:33:15
(4 weeks ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
Bad Web Bot