🇺🇸
TPI-Abuse
2026-11-10 06:15:08
UTC ·
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 124.19.76.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:15:00.124260 2026] [security2:error] [pid 9050:tid 9050] [client 124.19.76.63:59114] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 124.19.76.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:15:00.124260 2026] [security2:error] [pid 9050:tid 9050] [client 124.19.76.63:59114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fundaciondamashcc.org.ec|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fundaciondamashcc.org.ec"] [uri "/wp-json/wp/v2/users/"] [unique_id "avK2Y1iuS-NkW6wcGS4BbwAAABk"], referer: http://www.fundaciondamashcc.org.ec/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:28:02
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 124.19.76.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:27:55.805491 2026] [security2:error] [pid 27480:tid 27480] [client 124.19.76.63:59628] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 124.19.76.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:27:55.805491 2026] [security2:error] [pid 27480:tid 27480] [client 124.19.76.63:59628] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pathpa.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pathpa.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "au-l60c4dWEzuRHDEWbUqwAAAAg"], referer: http://www.pathpa.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 17:51:06
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 124.19.76.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:51:01.134866 2026] [security2:error] [pid 29699:tid 29699] [client 124.19.76.63:56573] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 124.19.76.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:51:01.134866 2026] [security2:error] [pid 29699:tid 29699] [client 124.19.76.63:56573] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kh6jim.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kh6jim.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atj7heSr-uKNstc3x3ksmgAAABg"], referer: https://www.kh6jim.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 20:56:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 124.19.76.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:56:07.896523 2026] [security2:error] [pid 6901:tid 6901] [client 124.19.76.63:51005] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 124.19.76.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:56:07.896523 2026] [security2:error] [pid 6901:tid 6901] [client 124.19.76.63:51005] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.loriarsenault.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.loriarsenault.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atKPZ9ddOKszoqi9IIx2tAAAAAo"], referer: https://www.loriarsenault.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-18 23:26:45
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇩🇰
powerhostingdk
2026-09-09 06:49:52
UTC ·
(2 months ago)
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
Brute-Force
🇺🇸
mnsf
2026-09-09 04:05:12
UTC ·
(2 months ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇩🇰
powerhostingdk
2026-09-07 03:15:31
UTC ·
(2 months ago)
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
Brute-Force
🇯🇵
Kinsei Engineering Inc.
2024-12-11 20:16:21
UTC ·
(1 year ago)
UFW:High-frequency access to non-released SSH or Telnet ports
Port Scan
SSH
2024-12-11 05:23:45
UTC ·
(1 year ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
