🇺🇸
smithclass.net
2026-02-02 20:42:56
UTC ·
(9 months ago)
Feb 2 20:42:55 gravy wordpress(smithclass.net)[924618]: Authentication attempt for unknown user gsmithsewanee-edu from 74.208.59.70
...
Hacking
Brute-Force
🇺🇸
octageeks.com
2026-01-28 05:06:09
UTC ·
(9 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
[email protected]
2026-01-26 01:16:15
UTC ·
(9 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-26T01:16:15Z
Brute-Force
🇺🇸
[email protected]
2026-01-26 01:01:06
UTC ·
(9 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-26T01:01:06Z
Brute-Force
🇺🇸
[email protected]
2026-01-26 00:01:37
UTC ·
(9 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-26T00:01:36Z
Brute-Force
🇺🇸
TPI-Abuse
2026-01-24 11:44:16
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 24 06:44:11.908945 2026] [security2:error] [pid 15799:tid 15799] [client 74 ...
show more
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 24 06:44:11.908945 2026] [security2:error] [pid 15799:tid 15799] [client 74.208.59.70:51848] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zost.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zost.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aXSwi4L2ISEEfO4RA6UkewAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-01-19 20:36:37
UTC ·
(9 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-01-19 16:51:47
UTC ·
(9 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇺🇸
myagent.site
2026-01-13 13:26:42
UTC ·
(10 months ago)
Authentication failure for eboney
Hacking
🇲🇹
Malta
2026-01-03 10:08:22
UTC ·
(10 months ago)
74.208.59.70 - - [03/Jan/2026:11:08:21 +0100] "GET /wp-json/wp/v2/users?per_page=100&page=1 HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.77 Safari/537.36"
VPN IP
Hacking
Web App Attack
🇩🇪
LRob
2025-12-13 04:36:42
UTC ·
(11 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 06:16:49
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 01:16:42.554196 2025] [security2:error] [pid 13308:tid 13308] [client 74 ...
show more
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 01:16:42.554196 2025] [security2:error] [pid 13308:tid 13308] [client 74.208.59.70:53196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||opticasprisma.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "opticasprisma.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTphynQfzngzIxbqLrQgqAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-03 04:04:16
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 23:04:12.677556 2025] [security2:error] [pid 11896:tid 11896] [client 74 ...
show more
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 23:04:12.677556 2025] [security2:error] [pid 11896:tid 11896] [client 74.208.59.70:37466] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.starvationacres.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.starvationacres.us"] [uri "/wp-json/Wp/v2/users"] [unique_id "aS-2vL1WrgcaqzU-geb0NgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 21:28:26
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:28:23.161134 2025] [security2:error] [pid 15185:tid 15185] [client 74 ...
show more
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:28:23.161134 2025] [security2:error] [pid 15185:tid 15185] [client 74.208.59.70:58326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cafelimelight.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cafelimelight.info"] [uri "/wp-json/wp/v2/users"] [unique_id "aS9Z9yxXP-g_G62bxTcRvQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 10:10:53
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 05:10:45.735651 2025] [security2:error] [pid 16237:tid 16259] [client 74 ...
show more
(mod_security) mod_security (id:225170) triggered by 74.208.59.70 (infong1617.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 05:10:45.735651 2025] [security2:error] [pid 16237:tid 16259] [client 74.208.59.70:55438] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.captechinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.captechinc.com"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aS67JQPpuST_5h_PqGeoSgAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack