🇺🇸
TPI-Abuse
2026-09-09 06:43:42
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama. ...
show more
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama.ocn.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 02:43:37.497222 2026] [security2:error] [pid 20795:tid 20808] [client 114.173.13.75:50884] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||woodamy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "woodamy.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqEAGeColVaRINUggTr6HAAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-09 06:35:40
(13 hours ago)
WordPress login brute-force | path: /wp-login.php | 2026-09-09 06:35 UTC
Brute-Force
Web App Attack
🇮🇹
Progetto1
2026-09-09 05:10:03
(14 hours ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 04:09:39
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama. ...
show more
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama.ocn.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 00:09:35.015226 2026] [security2:error] [pid 14785:tid 14785] [client 114.173.13.75:49756] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mccompu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mccompu.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqDb_wpoEC1E5PD6xYBx6gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 02:27:19
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama. ...
show more
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama.ocn.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 22:27:12.196052 2026] [security2:error] [pid 3527:tid 3527] [client 114.173.13.75:49818] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||garanta.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "garanta.co"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqDEAD64trEEkZJGZARXdwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-09 02:12:13
(17 hours ago)
WordPress Brute Force
Brute-Force
🇺🇸
TPI-Abuse
2026-09-09 01:16:20
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama. ...
show more
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama.ocn.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 21:16:13.631421 2026] [security2:error] [pid 3306:tid 3306] [client 114.173.13.75:58406] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bennoyes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bennoyes.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCzXejUl_LC_e283R2WjQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-09 00:53:05
(19 hours ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 114.173.13.75 (JP/Japan/p3716075-ipxg13101sou ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 114.173.13.75 (JP/Japan/p3716075-ipxg13101souka.saitama.ocn.ne.jp): 1 in the last 3600 secs (0-196)
show less
Hacking
🇲🇹
Malta
2026-09-09 00:27:14
(19 hours ago)
114.173.13.75 - - [09/Sep/2026:02:27:14 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
114.173.13.75 - - [09/Sep/2026:02:27:14 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
Anonymous
2026-09-09 00:07:18
(19 hours ago)
Web application attack detected.
Web App Attack
Anonymous
2026-09-08 22:45:48
(21 hours ago)
Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.
Web App Attack
🇮🇹
CoreTech srl
2026-09-08 21:53:56
(22 hours ago)
cloudlinux2 fail2ban: 2026-09-08 23:49:22,385 fail2ban.filter [1794]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-08 23:49:22,385 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 173.239.240.128 - 2026-09-08 23:49:21cloudlinux2 fail2ban: 2026-09-08 23:49:22,388 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 173.239.240.121 - 2026-09-08 23:49:21cloudlinux2 fail2ban: 2026-09-08 23:50:17,310 fail2ban.filter [1794]: INFO [plesk-proftpd] Found 217.160.173.67 - 2026-09-08 23:50:17cloudlinux2 fail2ban: 2026-09-08 23:50:20,386 fail2ban.filter [1794]: INFO [plesk-proftpd] Found 89.190.219.16 - 2026-09-08 23:50:20cloudlinux2 fail2ban: 2026-09-08 23:50:46,038 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 173.239.240.137 - 2026-09-08 23:50:45cloudlinux2 fail2ban: 2026-09-08 23:51:07,641 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 136.144.42.129 - 2026-09-08 23:51:07cloudlinux2 fail2ban: 2026-09-08 23:51:30,316 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 94.230.37.58 - 2026-09-08 23:51:30clou
show less
FTP Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 21:52:35
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama. ...
show more
(mod_security) mod_security (id:225170) triggered by 114.173.13.75 (p3716075-ipxg13101souka.saitama.ocn.ne.jp): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 17:52:31.241283 2026] [security2:error] [pid 21208:tid 21208] [client 114.173.13.75:38048] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.danielbrower.circleofsound.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.danielbrower.circleofsound.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCDn3Dq296g1nnEytDGjgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-09-08 21:01:52
(23 hours ago)
114.173.13.75 - - [08/Sep/2026:23:01:51 +0200] "GET /wp-login.php HTTP/2.0" 403 405 "-" "Mozilla/5.0 ...
show more
114.173.13.75 - - [08/Sep/2026:23:01:51 +0200] "GET /wp-login.php HTTP/2.0" 403 405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
sssrit
2026-09-08 19:53:15
(1 day ago)
114.173.13.75 - - [08/Sep/2026:21:53:14 +0200] "POST /wp-login.php HTTP/2.0" 401 4726 "https://onida ...
show more
114.173.13.75 - - [08/Sep/2026:21:53:14 +0200] "POST /wp-login.php HTTP/2.0" 401 4726 "https://onida.sssr.it/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack