🇺🇸
TPI-Abuse
2026-06-18 11:58:48
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 07:58:42.534334 2026] [security2:error] [pid 19344:tid 19344] [client 103.120.178.221:49608] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.concentricsteel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.concentricsteel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajPdcgfoAndQ32pbxg13PQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-06-18 00:59:09
(16 hours ago)
Domain : gherkindomains.co.uk
Rule : xmlrpc
2026-06-18 00:57:10 217.194.210.153 POST /xmlrpc.php - 8 ...
show more
Domain : gherkindomains.co.uk
Rule : xmlrpc
2026-06-18 00:57:10 217.194.210.153 POST /xmlrpc.php - 80 - 103.120.178.221 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0 - www.gherkindomains.co.uk 404 5 0 1455 399 307 - -
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 10:30:55
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 06:30:52.188555 2026] [security2:error] [pid 7626:tid 7690] [client 103.120.178.221:50938] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.campingcosmetics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.campingcosmetics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajJ3XEYQvOzm0Lfi5orN4gAAAxE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 04:17:36
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 00:17:30.497964 2026] [security2:error] [pid 8594:tid 8594] [client 103.120.178.221:35368] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.peterndudar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.peterndudar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajIf2tI_yE4hlypeqopKxAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 14:14:04
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 10:13:59.801387 2026] [security2:error] [pid 9224:tid 9224] [client 103.120.178.221:36062] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||learnserve.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "learnserve.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajFaJ0UuE96Ej25w3mC5awAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-16 00:03:03
(2 days ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇫🇷
SpaceHost-Server
2026-06-15 22:25:11
(2 days ago)
Brute-Force
Web App Attack
2026-06-15 08:11:28
(3 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 07:01:20
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:01:15.782458 2026] [security2:error] [pid 20069:tid 20118] [client 103.120.178.221:60152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||luxury.management|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "luxury.management"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-jO_fP_lHNF12o97ez5AAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-14 17:10:38
(4 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 22:52:53
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 18:52:46.527472 2026] [security2:error] [pid 9954:tid 9954] [client 103.120.178.221:34478] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.littlecreekrvranch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.littlecreekrvranch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3fPjBYjNhVEKnMi7No5wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 21:53:39
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:53:33.744469 2026] [security2:error] [pid 21021:tid 21021] [client 103.120.178.221:51850] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ftiptondds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ftiptondds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3RXcNAEGjICshfQnrRpwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 05:02:13
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:02:06.679431 2026] [security2:error] [pid 19872:tid 19872] [client 103.120.178.221:42304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.yogawithbubba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.yogawithbubba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aizkTjpL_UkhCVqF_locqgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-12 15:04:08
(6 days ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 11:49:08
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 103.120.178.221 (vps.org.gromor.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 07:49:02.994371 2026] [security2:error] [pid 23196:tid 23196] [client 103.120.178.221:57718] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.sizefinder.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sizefinder.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqgrm4cC7MLH3MvUS8YiQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack