🇺🇸
TPI-Abuse
2026-06-12 09:19:59
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:19:52.799194 2026] [security2:error] [pid 24720:tid 24720] [client 103.1.239.75:37980] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.crep-psych.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crep-psych.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aivPONj4-3oQBohyo7-jywAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-11 04:10:11
(2 days ago)
Blocked by CSF 13 firewall - Rule: VN/Vietnam/mx23975.superdata.vn
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 21:34:54
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 17:34:49.872431 2026] [security2:error] [pid 13480:tid 13480] [client 103.1.239.75:48748] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thesteeldrumman.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thesteeldrumman.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ainYefrevHnMYh1eBAVkTAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 03:40:02
(4 days ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 10:43:35
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 06:43:29.683731 2026] [security2:error] [pid 7900:tid 7900] [client 103.1.239.75:50962] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tcit.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tcit.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiVLUbYZjl3UbUUqUL21RQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 00:34:05
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 20:33:57.710306 2026] [security2:error] [pid 30773:tid 30773] [client 103.1.239.75:45904] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.peterjohnsonauthor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.peterjohnsonauthor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiS8dYw9cNc2KHSHNqMXZAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 17:49:00
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 13:48:55.283981 2026] [security2:error] [pid 19291:tid 19291] [client 103.1.239.75:39586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.feministvoice.blog|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.feministvoice.blog"] [uri "/wp-json/wp/v2/users"] [unique_id "aiRdh5Jg3In2d_KS3xtSOwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 08:16:27
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 04:16:20.361544 2026] [security2:error] [pid 24429:tid 24429] [client 103.1.239.75:59638] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soundtrax.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aiPXVCn-MeOzHJ6uGORXmQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Dolphi
2026-06-05 19:00:35
(1 week ago)
Excessive POST /xmlrpc.php requests
Brute-Force
Web App Attack
2026-06-05 18:40:03
(1 week ago)
| [Dangerous/Vietnam] Aggressive IP 103.1.239.75 (~30 hits). Type: DoS Defender- Web server 400 erro ...
show more
| [Dangerous/Vietnam] Aggressive IP 103.1.239.75 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-06-05 07:57:34
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 03:57:28.734547 2026] [security2:error] [pid 25125:tid 25125] [client 103.1.239.75:39412] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.keychainfilms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.keychainfilms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiKBaFjEgTKIHVVOICVLqgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 07:30:07
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.1.239.75 (mx23975.superdata.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 03:29:58.405338 2026] [security2:error] [pid 31372:tid 31372] [client 103.1.239.75:43602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.georgegourmet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.georgegourmet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiJ69sRayUr92yyfgo70PAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack