(mod_security) mod_security (id:210492) triggered by 85.203.34.67 (-): 1 in the last 300 secs; Ports ...
show more(mod_security) mod_security (id:210492) triggered by 85.203.34.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 17:41:41.406156 2026] [security2:error] [pid 31083:tid 31083] [client 85.203.34.67:31113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amatosdrywall.com"] [uri "/.env.php.swm%20"] [unique_id "aa8-laEhoUVfIGs_U0oa6QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-02-12T18:09:32.197753+01:00 wordpress(www.herz-ass-chapter.de)[3676392]: Authentication attemp ...
show more2026-02-12T18:09:32.197753+01:00 wordpress(www.herz-ass-chapter.de)[3676392]: Authentication attempt for unknown user prmask from 85.203.34.67 2026-02-12T18:09:32.896133+01:00 wordpress(www.herz-ass-chapter.de)[3676392]: Authentication attempt for unknown user prmask from 85.203.34.67 2026-02-12T18:09:33.594188+01:00 wordpress(www.herz-ass-chapter.de)[3676935]: Authentication attempt for unknown user prmask from 85.203.34.67 2026-02-12T18:09:34.224557+01:00 wordpress(www.herz-ass-chapter.de)[3676392]: Authentication attempt for unknown user prmask from 85.203.34.67 2026-02-12T18:09:34.929685+01:00 wordpress(www.herz-ass-chapter.de)[3676935]: Authentication attempt for unknown user prmask from 85.203.34.67
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
Anonymous
2026-02-12T16:56:11.687984+01:00 wordpress(www.hautnah-bodyware.de)[3620861]: Authentication attemp ...
show more2026-02-12T16:56:11.687984+01:00 wordpress(www.hautnah-bodyware.de)[3620861]: Authentication attempt for unknown user hahme from 85.203.34.67 2026-02-12T16:56:12.337355+01:00 wordpress(www.hautnah-bodyware.de)[3620861]: Authentication attempt for unknown user hahme from 85.203.34.67 2026-02-12T16:56:12.929392+01:00 wordpress(www.hautnah-bodyware.de)[3620861]: Authentication attempt for unknown user hahme from 85.203.34.67 2026-02-12T16:56:13.537386+01:00 wordpress(www.hautnah-bodyware.de)[3620861]: Authentication attempt for unknown user hahme from 85.203.34.67 2026-02-12T16:56:14.139583+01:00 wordpress(www.hautnah-bodyware.de)[3620861]: Authentication attempt for unknown user hahme from 85.203.34.67
show less
Feb 12 07:32:18 www4 WPAudit[436242]: 85.203.34.67 www.goldislandforestproducts.ca "Mozilla/5.0 (Win ...
show moreFeb 12 07:32:18 www4 WPAudit[436242]: 85.203.34.67 www.goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" sbd-admin:goldislandforestproducts2018 FAIL
Feb 12 07:32:18 www4 WPAudit[436242]: 85.203.34.67 www.goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" sbd-admin:goldislandforestproducts2019 FAIL
Feb 12 07:32:19 www4 WPAudit[436242]: 85.203.34.67 www.goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" sbd-admin:goldislandforestproducts999 FAIL
Feb 12 07:32:20 www4 WPAudit[436242]: 85.203.34.67 www.goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" sbd-admin:2017 FAIL
Feb 12 07:32:20 www4 WPAudit[436242]: 85.203.
...
show less
Brute-Force
Web App Attack
Anonymous
2026-02-12T12:02:30.844637+01:00 wordpress(www.geoundumwelt.de)[3161250]: Authentication attempt fo ...
show more2026-02-12T12:02:30.844637+01:00 wordpress(www.geoundumwelt.de)[3161250]: Authentication attempt for unknown user mya from 85.203.34.67 2026-02-12T12:02:31.516302+01:00 wordpress(www.geoundumwelt.de)[3161250]: Authentication attempt for unknown user mya from 85.203.34.67 2026-02-12T12:02:32.177188+01:00 wordpress(www.geoundumwelt.de)[3161250]: Authentication attempt for unknown user mya from 85.203.34.67 2026-02-12T12:02:32.817640+01:00 wordpress(www.geoundumwelt.de)[3161250]: Authentication attempt for unknown user mya from 85.203.34.67 2026-02-12T12:02:33.491297+01:00 wordpress(www.geoundumwelt.de)[3161250]: Authentication attempt for unknown user mya from 85.203.34.67
show less
(mod_security) mod_security (id:210410) triggered by 85.203.34.67 (GB/United Kingdom/-): 5 in the la ...
show more(mod_security) mod_security (id:210410) triggered by 85.203.34.67 (GB/United Kingdom/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: POST //wp-login.php HTTP/1.1
(wplogin) Failed WordPress login from 85.203.34.67 (GB/United Kingdom/-): 5 in the last 3600 secs (0 ...
show more(wplogin) Failed WordPress login from 85.203.34.67 (GB/United Kingdom/-): 5 in the last 3600 secs (0-123)
show less
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
Anonymous
2026-02-09T19:17:09.079727+01:00 wordpress(www.wohnungsgenossenschaft.de)[3606504]: Authentication ...
show more2026-02-09T19:17:09.079727+01:00 wordpress(www.wohnungsgenossenschaft.de)[3606504]: Authentication attempt for unknown user empress_admin from 85.203.34.67 2026-02-09T19:17:09.200255+01:00 wordpress(www.wohnungsgenossenschaft.de)[3606509]: Authentication attempt for unknown user empress_admin from 85.203.34.67 2026-02-09T19:17:09.330803+01:00 wordpress(www.wohnungsgenossenschaft.de)[3606504]: Authentication attempt for unknown user empress_admin from 85.203.34.67 2026-02-09T19:17:09.437980+01:00 wordpress(www.wohnungsgenossenschaft.de)[3606509]: Authentication attempt for unknown user empress_admin from 85.203.34.67 2026-02-09T19:17:09.550506+01:00 wordpress(www.wohnungsgenossenschaft.de)[3606504]: Authentication attempt for unknown user empress_admin from 85.203.34.67
show less