🇺🇸
TPI-Abuse
2026-11-12 12:22:34
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:22:22.432903 2026] [security2:error] [pid 15856:tid 15885] [client 125.124.69.31:33906] M ...
show more
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:22:22.432903 2026] [security2:error] [pid 15856:tid 15885] [client 125.124.69.31:33906] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||almerirock.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "almerirock.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "avWvfvM5ukmCM-ptMUCnLwAAAJg"], referer: https://almerirock.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 23:31:25
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:31:20.636557 2026] [security2:error] [pid 16367:tid 16367] [client 125.124.69.31:54542] M ...
show more
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:31:20.636557 2026] [security2:error] [pid 16367:tid 16367] [client 125.124.69.31:54542] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fixitz.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fixitz.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "avT6yJwfhLt8eT7fcKdA4wAAAA8"], referer: https://www.fixitz.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-07 06:15:56
UTC ·
(1 week ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-10-19 00:05:03
UTC ·
(3 weeks ago)
Abuse Detected (29)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 20:48:01
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 16:47:52.424964 2026] [security2:error] [pid 31502:tid 31502] [client 125.124.69.31:44416] M ...
show more
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 16:47:52.424964 2026] [security2:error] [pid 31502:tid 31502] [client 125.124.69.31:44416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||goseethenurse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goseethenurse.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atPe-NaemT8A2Z6pNCds1AAAAAE"], referer: http://goseethenurse.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 07:20:46
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 03:20:39.321821 2026] [security2:error] [pid 27628:tid 27628] [client 125.124.69.31:52004] M ...
show more
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 03:20:39.321821 2026] [security2:error] [pid 27628:tid 27628] [client 125.124.69.31:52004] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||richmondrents.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "richmondrents.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asH-R8rcdEEFxy0GLzlQFwAAABI"], referer: https://richmondrents.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-24 01:49:13
UTC ·
(1 month ago)
Blocked by web application firewall: automated malicious HTTP requests (WordPress xmlrpc.php / wp-login brute-force and admin-panel scanning). Distributed botnet / automated tooling. No legitimate use.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 14:44:24
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 10:44:16.015374 2026] [security2:error] [pid 28612:tid 28612] [client 125.124.69.31:52254] M ...
show more
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 10:44:16.015374 2026] [security2:error] [pid 28612:tid 28612] [client 125.124.69.31:52254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||modestosoftwater.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modestosoftwater.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqQTwE6Vosqxj_AQMvasHgAAAAo"], referer: https://modestosoftwater.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
claude CALVET
2026-08-14 19:29:38
UTC ·
(3 months ago)
gee-Joomla Admin : try to force the door...
Hacking
🇺🇸
mnsf
2026-08-13 17:05:15
UTC ·
(3 months ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-07 08:12:55
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 04:12:46.066717 2026] [security2:error] [pid 3622021:tid 3622021] [client 125.124.69.31:4588 ...
show more
(mod_security) mod_security (id:225170) triggered by 125.124.69.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 04:12:46.066717 2026] [security2:error] [pid 3622021:tid 3622021] [client 125.124.69.31:45888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||madisonjazzorchestra.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "madisonjazzorchestra.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "anWTfi_r-8WIrA30WWqk3wAAAAU"], referer: https://madisonjazzorchestra.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
