🇫🇷
tilellit.pro
2026-05-18 16:23:36
(2 weeks ago)
Fail2Ban banned 89.19.34.213 for security violations in jail wp-armour. Log: 2026/05/18 16:23:35 [er ...
show more
Fail2Ban banned 89.19.34.213 for security violations in jail wp-armour. Log: 2026/05/18 16:23:35 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 89.19.34.213 | Target: wplogin" , client: 89.19.34.213, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-05-18 12:04:55
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 89.19.34.213 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.34.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 08:04:47.095984 2026] [security2:error] [pid 20492:tid 20492] [client 89.19.34.213:18437] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frogdesignmexico.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frogdesignmexico.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agsAX9_6fR91YKWXwWo-uQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-04-29 06:57:01
(1 month ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
MusicLibrary
2026-03-27 00:04:48
(2 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇪🇸
el-brujo
2026-03-26 14:24:33
(2 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Chrome/ ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Chrome/97.7 Safari/537.57 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-03-26T14:24:33Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
2026-03-24 09:28:27
(2 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
🇮🇹
A000Z
2026-03-23 10:14:47
(2 months ago)
Fail2Ban: 89.19.34.213 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Chrome/92.2 ...
show more
Fail2Ban: 89.19.34.213 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Chrome/92.2 Safari/532.52
show less
Bad Web Bot
🇩🇪
MusicLibrary
2026-03-23 05:31:41
(2 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2026-03-22 15:43:27
(2 months ago)
XML RPC Scan Activities: "2026-03-22T22:43:27.486+07:00" "/xmlrpc.php" "89.19.34.213" "AppleWebKit/5 ...
show more
XML RPC Scan Activities: "2026-03-22T22:43:27.486+07:00" "/xmlrpc.php" "89.19.34.213" "AppleWebKit/536.36 (KHTML, like Gecko111)"
show less
Web App Attack
Brute-Force
🇩🇪
MusicLibrary
2026-03-19 18:06:26
(2 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2026-03-16 08:48:27
(2 months ago)
XML RPC Scan Activities: "2026-03-16T15:48:27.605+07:00" "/xmlrpc.php" "89.19.34.213" "Mozilla/5.0 ( ...
show more
XML RPC Scan Activities: "2026-03-16T15:48:27.605+07:00" "/xmlrpc.php" "89.19.34.213" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:143.0) Gecko/20100101 Firefox/143.0"
show less
Web App Attack
Brute-Force
🇮🇩
BPS-StatisticsIndonesia
2026-03-16 03:29:38
(2 months ago)
XML RPC Scan Activities: "2026-03-16T10:29:38.679+07:00" "/xmlrpc.php" "89.19.34.213" "AppleWebKit/5 ...
show more
XML RPC Scan Activities: "2026-03-16T10:29:38.679+07:00" "/xmlrpc.php" "89.19.34.213" "AppleWebKit/539.39 (KHTML, like Gecko111)"
show less
Web App Attack
Brute-Force
🇮🇩
BPS-StatisticsIndonesia
2026-03-14 11:38:42
(2 months ago)
XML RPC Scan Activities: "2026-03-14T18:38:42.153+07:00" "/xmlrpc.php" "89.19.34.213" "Mozilla/5.0 ( ...
show more
XML RPC Scan Activities: "2026-03-14T18:38:42.153+07:00" "/xmlrpc.php" "89.19.34.213" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:145.0) Gecko/20100101 Firefox/145.0"
show less
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-02-13 17:24:47
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 89.19.34.213 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.34.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 12:24:42.142638 2026] [security2:error] [pid 2423832:tid 2423832] [client 89.19.34.213:14063] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aY9eWl1CDoiFnw9ll77lNwAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
aks4226
2026-02-09 08:12:18
(3 months ago)
Attacking common web applications. (n01)
Web App Attack