🇦🇺
screwlooseit.com.au
2026-06-17 08:27:53
(25 minutes ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
TR/Turkey/81vjja9u.guzel.net.tr
Web App Attack
🇳🇱
juutis
2026-06-16 06:17:59
(1 day ago)
89.252.134.81 - - [15/Jun/2026:19:23:38 +0200] "POST /wp-login.php HTTP/1.1" 200 9283 "https://taide ...
show more
89.252.134.81 - - [15/Jun/2026:19:23:38 +0200] "POST /wp-login.php HTTP/1.1" 200 9283 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
89.252.134.81 - - [16/Jun/2026:03:15:12 +0200] "POST /wp-login.php HTTP/1.1" 200 9296 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
89.252.134.81 - - [16/Jun/2026:08:17:57 +0200] "POST /wp-login.php HTTP/1.1" 200 9299 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 05:44:45
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 01:44:38.896962 2026] [security2:error] [pid 24719:tid 24719] [client 89.252.134.81:57998] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michelehoop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michelehoop.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ajDixkKf_AlH6opTnBikkAAAAGU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 05:03:39
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 01:03:31.806547 2026] [security2:error] [pid 5998:tid 5998] [client 89.252.134.81:35586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kiinlog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kiinlog.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ajDZI87mX6FkB24xUPZECgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
floreriaexpress
2026-06-16 04:27:04
(1 day ago)
FakeADS-Anti: country:TR | https://floreriaexpresschile.cl/wp-json/wp/v2/users/me
Bad Web Bot
🇲🇽
octageeks.com
2026-06-16 04:19:00
(1 day ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 03:21:32
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 23:21:26.939033 2026] [security2:error] [pid 27437:tid 27437] [client 89.252.134.81:57168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||raintechgutters.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "raintechgutters.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ajDBNsFH2EfwvQWeh2T80QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
stinpriza
2026-06-16 03:11:05
(1 day ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 02:57:22
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 22:57:17.709641 2026] [security2:error] [pid 9629:tid 9629] [client 89.252.134.81:44972] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||techsunlimited.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "techsunlimited.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ajC7jb-bsiXu--ewnUKlbgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-06-16 02:49:17
(1 day ago)
(y4) Failed scan -byebye- from 89.252.134.81 (TR/Türkiye/81vjja9u.guzel.net.tr): (CF_ENABLE)
Hacking
🇺🇸
integrantservices.com
2026-06-16 02:23:44
(1 day ago)
(wordpress) Failed wordpress login from 89.252.134.81 (TR/Türkiye/81vjja9u.guzel.net.tr)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-16 02:23:14
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 22:23:10.361954 2026] [security2:error] [pid 11462:tid 11462] [client 89.252.134.81:43624] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||motherlyhomecare.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "motherlyhomecare.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ajCzjg39mT8ZcS2_Hal7XAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
QT
2026-06-16 02:16:42
(1 day ago)
Unauthorised WordPress admin login attempted at 2026-06-16 12:16:40 +1000
Web App Attack
🇺🇸
Mundo Bueno
2026-06-16 01:05:30
(1 day ago)
[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me | Pays: TR | UA: Mozilla/5.0 (Wi ...
show more
[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me | Pays: TR | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 01:04:13
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 89.252.134.81 (81vjja9u.guzel.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:04:08.812906 2026] [security2:error] [pid 28878:tid 28878] [client 89.252.134.81:44032] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jfexpressfr8.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jfexpressfr8.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ajChCIFxBEugRnq82kAy0wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack