🇺🇸
TPI-Abuse
2026-09-09 00:45:43
(25 minutes ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 20:45:35.599459 2026] [security2:error] [pid 31697:tid 31697] [client 123.202.172.236:33636] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||scrunchiebuttbikini.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scrunchiebuttbikini.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCsL0VIC1aeI6Pwla3C7wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 22:47:53
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 18:47:48.645021 2026] [security2:error] [pid 20563:tid 20563] [client 123.202.172.236:37710] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ucommsi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ucommsi.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCQlJzxXN4iAFyHOw9mzgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-08 22:15:31
(2 hours ago)
Web attack blocked by Wordfence on mergel.nu (1 hit). Reported by CRMON.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 20:44:19
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 16:44:15.296550 2026] [security2:error] [pid 26989:tid 26989] [client 123.202.172.236:37392] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iplayriichi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iplayriichi.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqBzn7cgJM3aewRKk4vVvgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 20:09:05
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 16:09:00.903244 2026] [security2:error] [pid 6088:tid 6088] [client 123.202.172.236:45756] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||avalderlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "avalderlaw.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqBrXNjw3bYLygtTR31NIwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 19:38:39
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 15:38:32.435139 2026] [security2:error] [pid 12440:tid 12440] [client 123.202.172.236:35534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||earthtwoworkshop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "earthtwoworkshop.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqBkOGNwWm2UjOXVWU5kDwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-08 19:20:38
(5 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-08 19:06:47
(6 hours ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 18:54:56
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 14:54:50.807548 2026] [security2:error] [pid 7611:tid 7611] [client 123.202.172.236:56254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pattenden.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pattenden.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqBZ-iTTCwptEQvDDxWa_gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-08 17:35:47
(7 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 17:34:14
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 13:34:09.951444 2026] [security2:error] [pid 5154:tid 5154] [client 123.202.172.236:35538] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bostonlog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bostonlog.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqBHEVm2zGFf-N-PSRtUdwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 16:41:36
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 12:41:30.783988 2026] [security2:error] [pid 6448:tid 6448] [client 123.202.172.236:36708] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dungeonsremastered.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dungeonsremastered.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqA6umIUUQrqUJ6fmT2Q4wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 15:06:08
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 11:06:04.246459 2026] [security2:error] [pid 26280:tid 26280] [client 123.202.172.236:48830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grandpont-house.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grandpont-house.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqAkXHG74dtBqaoTEOioggAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 12:51:03
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:50:57.021140 2026] [security2:error] [pid 3509:tid 3509] [client 123.202.172.236:39256] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thorndikestudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thorndikestudio.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqAEsdL1U7wtxr8QcR8XJgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 10:38:51
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 123.202.172.236 (123202172236.ctinets.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:38:44.078647 2026] [security2:error] [pid 1714850:tid 1715220] [client 123.202.172.236:57456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.eldesvandemaggie.com.emehache.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.eldesvandemaggie.com.emehache.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ap_ltN0VIYzC24HGNdGXEQAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
