🇧🇾
lns.bz
2026-07-13 16:00:07
(5 days ago)
Banned for trying to access xmlrpc [BY]
Web App Attack
🇷🇴
INTEQ
2026-07-12 21:56:30
(5 days ago)
Web attack from 107.172.134.18
Web App Attack
🇺🇸
factor1
2026-07-11 19:32:42
(1 week ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
🇷🇴
INTEQ
2026-07-11 17:56:12
(1 week ago)
Web attack from 107.172.134.18
Web App Attack
🇺🇸
lostswordfish.com
2026-07-11 12:38:03
(1 week ago)
Wordfence waf block on wp20190711M4
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 03:22:42
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossin ...
show more
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 23:22:39.606838 2026] [security2:error] [pid 23195:tid 23195] [client 107.172.134.18:38908] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soonerstone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soonerstone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajn7_0AW2KPzkOw-XJn65QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 01:17:25
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossin ...
show more
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 21:17:19.689272 2026] [security2:error] [pid 16110:tid 16110] [client 107.172.134.18:58380] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.j3pr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.j3pr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajnenwu8ARJ2MODHgYUxlgAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 15:36:42
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossin ...
show more
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 11:36:36.490335 2026] [security2:error] [pid 10722:tid 10722] [client 107.172.134.18:57708] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jonasrimkunas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jonasrimkunas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajlWhHztOtYuRWt_fFjnkAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 13:16:41
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossin ...
show more
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 09:16:35.863555 2026] [security2:error] [pid 3057:tid 3057] [client 107.172.134.18:54282] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||buenasfrecuencias.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buenasfrecuencias.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajk1s5dkKiZBHXro3dRdnwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 10:09:03
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossin ...
show more
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 06:08:56.159450 2026] [security2:error] [pid 28412:tid 28412] [client 107.172.134.18:40364] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drgtek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drgtek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajkJuG8DcBvgq8ov9SvrXAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 05:58:40
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossin ...
show more
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 01:58:36.767334 2026] [security2:error] [pid 14618:tid 14618] [client 107.172.134.18:35672] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.abeltours.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abeltours.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajjPDCYx2GEan5G4ubKWdAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-05-18 22:26:59
(1 month ago)
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-05-18 19:29:14
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 10:17:10
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossin ...
show more
(mod_security) mod_security (id:225170) triggered by 107.172.134.18 (107-172-134-18-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 06:17:01.132868 2026] [security2:error] [pid 21574:tid 21574] [client 107.172.134.18:54748] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.godcanuseyou.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.godcanuseyou.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agrnHQ9Zx-n9vhm2YOgncQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-05-17 22:26:54
(2 months ago)
Brute-Force
Web App Attack