🇺🇸
TPI-Abuse
2026-07-16 23:37:29
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 19:37:24.114822 2026] [security2:error] [pid 20226:tid 20226] [client 122.8.93.214:15159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||linnardfinancial.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "linnardfinancial.com"] [uri "/wp-json/wp/v2/users"] [unique_id "allrNKiPleT9RJzm2OOEjAAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-15 09:42:04
(3 days ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇺🇸
ambor
2026-07-14 17:55:19
(4 days ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇨🇿
ptlab
2026-07-11 16:45:11
(1 week ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇬🇧
adnscom.net
2026-06-16 00:16:41
(1 month ago)
IPS trigger: Brute force WebApp/CMS scanning/attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 10:35:44
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 06:35:39.841040 2026] [security2:error] [pid 15489:tid 15489] [client 122.8.93.214:40551] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||keidar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "keidar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqPe48m5uxN0eAcQ1i35AAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
1gz
2026-06-02 23:21:09
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
consul.to
2026-06-02 17:32:54
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
stinpriza
2026-06-02 09:07:36
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 01:05:40
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 21:05:36.406107 2026] [security2:error] [pid 29628:tid 29631] [client 122.8.93.214:26495] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||barneysprecision.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barneysprecision.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agZxYEtRsRI6ZtTQITx22AAAAIE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 21:59:50
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 17:59:47.101977 2026] [security2:error] [pid 28122:tid 28122] [client 122.8.93.214:12003] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vcmail.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vcmail.net"] [uri "/wp-json/wp/v2/users"] [unique_id "abh9U3Txy4_vf0ZQR21HvwAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-09 11:29:34
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 122.8.93.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 07:29:28.765178 2026] [security2:error] [pid 10273:tid 10273] [client 122.8.93.214:45989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gpaarch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gpaarch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aa6vGKechlSMETuCI7Q0-gAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-13 08:19:29
(5 months ago)
"GET /wp-login.php HTTP/1.1"
Hacking
Web App Attack
🇩🇪
mxbl
2026-02-13 03:10:05
(5 months ago)
Scanning for CMS vulnerabilities on a non-CMS system: /wp-login.php
Web App Attack
🇬🇧
Yosi
2026-02-12 21:17:10
(5 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force