🇫🇷
masterguru
2026-07-08 17:25:32
(4 days ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 103.169.160.106 (BD/Bangladesh/pa380.positive ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 103.169.160.106 (BD/Bangladesh/pa380.positiveserver.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-07 17:00:40
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (pa380.positiveserver.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (pa380.positiveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 13:00:32.974621 2026] [security2:error] [pid 20050:tid 20050] [client 103.169.160.106:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ac.cloudex.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ac.cloudex.click"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ak0wsFACAbROXPtoMzFIZQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 20:12:33
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:12:28.368511 2026] [security2:error] [pid 13643:tid 13643] [client 103.169.160.106:43762] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||firstunitedreserve.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firstunitedreserve.com"] [uri "/wp-json/wp/v2/users/10"] [unique_id "akgXrBCSGwOSvTxwVr8kVAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-01 04:22:09
(1 week ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇲🇽
octageeks.com
2026-07-01 04:06:25
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 08:41:28
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (server7.serverdiana.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (server7.serverdiana.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 04:41:19.911649 2026] [security2:error] [pid 30210:tid 30210] [client 103.169.160.106:35128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ohanameetup.party|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ohanameetup.party"] [uri "/wp-json/wp/v2/users/5"] [unique_id "akIvr1FDpqL0hsZL-me9xAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-29 05:17:43
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 17:47:20
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (server7.serverdiana.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (server7.serverdiana.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 13:47:13.773027 2026] [security2:error] [pid 4369:tid 4369] [client 103.169.160.106:54910] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||renjunews.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "renjunews.com"] [uri "/wp-json/wp/v2/users/3"] [unique_id "akFeIVud30fFe4rpz6yFsgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-28 13:06:42
(2 weeks ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
etu brutus
2026-06-27 07:40:12
(2 weeks ago)
103.169.160.106 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 01:26:57
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (server7.serverdiana.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (server7.serverdiana.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 21:26:53.248354 2026] [security2:error] [pid 12680:tid 12680] [client 103.169.160.106:47522] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||budgetbyron.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "budgetbyron.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajsyXWn8kDlHaReW73NSjAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-06-21 00:36:43
(3 weeks ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-19 11:51:03
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (server7.serverdiana.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 103.169.160.106 (server7.serverdiana.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:50:56.659620 2026] [security2:error] [pid 15364:tid 15364] [client 103.169.160.106:51310] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jesussotoca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jesussotoca.com"] [uri "/wp-json/wp/v2/users/10"] [unique_id "ajUtIOpQDPm9FTTEq8PtTAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-17 07:58:02
(3 weeks ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 103.169.160.106 (BD/Bangladesh/server7.server ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 103.169.160.106 (BD/Bangladesh/server7.serverdiana.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
lostswordfish.com
2026-06-10 10:56:04
(1 month ago)
Wordfence waf block on decarcerationnation
Web App Attack