🇮🇹
Inartis
2026-11-10 08:19:15
UTC ·
(1 day ago)
Nov 10 09:19:14 mail1 postfix/smtpd[1885943]: warning: lfbn-nan-1-889-227.w90-27.abo.wanadoo.fr[90.27.92.227]: SASL PLAIN authentication failed: authentication failure,
[email protected]
...
Port Scan
Brute-Force
🇫🇷
UnixPrime
2026-10-25 14:58:08
UTC ·
(2 weeks ago)
90.27.92.227 - - [25/Oct/2026:15:58:05 +0100] "GET /wp-login.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/137.36 (KHTML, like Gecko) Chrome/232.0.0.0 Safari/537.36"
90.27.92.227 - - [25/Oct/2026:15:58:07 +010 ...
show more
90.27.92.227 - - [25/Oct/2026:15:58:05 +0100] "GET /wp-login.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/137.36 (KHTML, like Gecko) Chrome/232.0.0.0 Safari/537.36"
90.27.92.227 - - [25/Oct/2026:15:58:07 +0100] "GET /admin.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/137.36 (KHTML, like Gecko) Chrome/232.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-13 21:28:49
UTC ·
(4 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇧🇪
voormedia
2026-10-05 20:19:52
UTC ·
(1 month ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇺🇸
TPI-Abuse
2026-10-03 06:03:52
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 90.27.92.227 (lfbn-nan-1-889-227.w90-27.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 02:03:45.729189 2026] [security2:error] [pid 6808:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 90.27.92.227 (lfbn-nan-1-889-227.w90-27.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 02:03:45.729189 2026] [security2:error] [pid 6808:tid 6808] [client 90.27.92.227:40258] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotelkona.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotelkona.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asCawRifFa6e3qd7IpIbbwAAAAE"], referer: http://hotelkona.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 18:03:51
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 90.27.92.227 (lfbn-nan-1-889-227.w90-27.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 14:03:43.039776 2026] [security2:error] [pid 20840:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 90.27.92.227 (lfbn-nan-1-889-227.w90-27.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 14:03:43.039776 2026] [security2:error] [pid 20840:tid 20840] [client 90.27.92.227:60446] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frogdesignmexico.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frogdesignmexico.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqg2_yujuoEs7pEac7q4kgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-09 16:18:00
UTC ·
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇰
powerhostingdk
2026-09-08 21:06:13
UTC ·
(2 months ago)
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 11:31:54
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 90.27.92.227 (lfbn-nan-1-889-227.w90-27.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 07:31:46.980250 2026] [security2:error] [pid 3465340:t ...
show more
(mod_security) mod_security (id:225170) triggered by 90.27.92.227 (lfbn-nan-1-889-227.w90-27.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 07:31:46.980250 2026] [security2:error] [pid 3465340:tid 3465340] [client 90.27.92.227:44602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dynamic-therapy-mn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dynamic-therapy-mn.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ap_yIuNNizsNrvYPHy1s2QAAAAE"], referer: https://dynamic-therapy-mn.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-29 12:09:52
UTC ·
(2 months ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force
Web App Attack
🇨🇦
DRI
2026-08-25 11:55:12
UTC ·
(2 months ago)
Web attack/Malicious activity detected
Web App Attack
🇬🇧
SilverZippo
2026-08-19 03:22:19
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
mnsf
2026-08-10 04:05:12
UTC ·
(3 months ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-13 04:52:33
UTC ·
(3 months ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇮🇩
Burayot
2026-07-11 06:39:20
UTC ·
(4 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 90.27.92.227 (FR/France/lfbn-nan-1-889-227.w90-27.abo.wanadoo.fr): 2 in the last 3600 secs
Web App Attack
