🇺🇸
TPI-Abuse
2026-07-04 04:41:30
(38 minutes ago)
(mod_security) mod_security (id:225170) triggered by 103.49.131.242 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.49.131.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:41:22.050327 2026] [security2:error] [pid 32673:tid 32698] [client 103.49.131.242:51300] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||greaternorthmiamihistory.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greaternorthmiamihistory.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akiO8lPCzIKP4WPstz69kwAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 01:00:09
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.49.131.242 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.49.131.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 21:00:04.846873 2026] [security2:error] [pid 19904:tid 19904] [client 103.49.131.242:35424] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||saadeh.ws|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "saadeh.ws"] [uri "/wp-json/wp/v2/users/8"] [unique_id "akhbFGoqDiAPwZkrX4KKNAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-03 22:57:22
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 18:50:44
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.49.131.242 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.49.131.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:50:40.814961 2026] [security2:error] [pid 19934:tid 19934] [client 103.49.131.242:49382] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||futuresgrowhere.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "futuresgrowhere.com"] [uri "/wp-json/wp/v2/users/7"] [unique_id "akgEgKsuaJPToBgurvsj-gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-03 10:19:07
(19 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 09:09:51
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.49.131.242 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.49.131.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 05:09:43.984710 2026] [security2:error] [pid 15416:tid 15416] [client 103.49.131.242:45896] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gemco-mfg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gemco-mfg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akd8VzzKFS1MYqkklNqQKgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-07-02 00:45:13
(2 days ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
lostswordfish.com
2026-07-01 22:06:03
(2 days ago)
Wordfence waf block on wp20190711M4
Web App Attack
🇩🇪
FeG Deutschland
2026-06-29 03:38:24
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-06-28 18:05:34
(5 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇲🇹
Malta
2026-06-26 17:54:40
(1 week ago)
103.49.131.242 - - [26/Jun/2026:19:54:40 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ...
show more
103.49.131.242 - - [26/Jun/2026:19:54:40 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇺🇸
xmission.com
2026-05-19 09:36:22
(1 month ago)
Sourced 1 spam messages over 3x XMissions threshold. Highest score: 52.6. Latest msgid suffix: ...33 ...
show more
Sourced 1 spam messages over 3x XMissions threshold. Highest score: 52.6. Latest msgid suffix: ...3360215256
show less
Email Spam