🇩🇪
www.Examensfragen.de
2026-06-14 14:09:32
(4 days ago)
Web Spam
Bad Web Bot
🇩🇪
LRob.fr
2026-06-12 05:30:09
(6 days ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-12 05:15:47
(6 days ago)
(wp_login_try) srv103 WP Login Attempt 178.128.53.87 (SG/Singapore/-): 10 in the last 3600 secs; Por ...
show more
(wp_login_try) srv103 WP Login Attempt 178.128.53.87 (SG/Singapore/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Savvii
2026-06-12 04:19:29
(1 week ago)
10 attempts against mh-misc-ban on ec102932
Web App Attack
🇳🇱
Savvii
2026-06-12 04:04:14
(1 week ago)
16 attempts against mh-misc-ban on ec102932
Web App Attack
2026-06-12 02:40:18
(1 week ago)
[Firewall Canary] Temporary ban due to firewall rule match [URI:*/wp-login.php]
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 20:35:17
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.128.53.87 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.53.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 16:35:12.260160 2026] [security2:error] [pid 19131:tid 19131] [client 178.128.53.87:63577] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ardeeapps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ardeeapps.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiscAOILaO-aSSLpfciMlQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 18:58:52
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.128.53.87 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.53.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 14:58:47.054021 2026] [security2:error] [pid 1349:tid 1349] [client 178.128.53.87:59117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.staging.justicehoward.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.staging.justicehoward.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aisFZ-n23NA_Ld1uonXcOAAAADc"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 14:59:48
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.128.53.87 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.53.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:59:40.426075 2026] [security2:error] [pid 3742:tid 3742] [client 178.128.53.87:51810] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||amespeak.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "amespeak.com"] [uri "/wp-json/wp/v2/users"] [unique_id "airNXJUvXxfQcPMCPkul6wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 14:22:01
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.128.53.87 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.53.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:21:52.992245 2026] [security2:error] [pid 19631:tid 19631] [client 178.128.53.87:63664] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pinetreedistrict.rimaine.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pinetreedistrict.rimaine.org"] [uri "/wp-json/wp/v2/users"] [unique_id "airEgJ3270fwA0RZJFriiQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-06-11 08:28:42
(1 week ago)
joe-6 : Trying access system files=>/license.txt(license.txt)
Hacking
🇳🇱
Site.eu
2026-06-11 07:46:36
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
Site.eu
2026-06-11 07:05:08
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇨🇭
backslash
2026-06-11 06:21:00
(1 week ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇺🇸
mnsf
2026-06-11 03:05:47
(1 week ago)
Login Too Frequent (7)
Brute-Force
Web App Attack