🇺🇸
TPI-Abuse
2026-06-23 16:45:40
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast ...
show more
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 12:45:34.121297 2026] [security2:error] [pid 15906:tid 15906] [client 13.230.157.153:55530] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||adona.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adona.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajq4Ljt1LgevgXMYRXNgjwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-23 13:58:11
(3 hours ago)
[redacted] 13.230.157.153 - - [23/Jun/2026:15:57:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" " ...
show more
[redacted] 13.230.157.153 - - [23/Jun/2026:15:57:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 13.230.157.153 - - [23/Jun/2026:15:57:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 13.230.157.153 - - [23/Jun/2026:15:57:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 13.230.157.153 - - [23/Jun/2026:15:57:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 13.230.157.153 - - [23/Jun/2026:15:57:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mo
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 13:14:24
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast ...
show more
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 09:14:21.377660 2026] [security2:error] [pid 3475:tid 3475] [client 13.230.157.153:57390] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.abilityengraving.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abilityengraving.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajqGrQMq7coQlYhr9D-6ugAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 11:58:48
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast ...
show more
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 07:58:44.081968 2026] [security2:error] [pid 5456:tid 5456] [client 13.230.157.153:55357] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.aandbnaturalfoods.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aandbnaturalfoods.com"] [uri "/naturally/wp-json/wp/v2/users/"] [unique_id "ajp09IB7iDnHAMHvpHTkAQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 09:35:33
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast ...
show more
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 05:35:27.905659 2026] [security2:error] [pid 1728:tid 1728] [client 13.230.157.153:50704] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.67ronin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.67ronin.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajpTX53fVsaPPR46nXNzIwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 08:24:28
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast ...
show more
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 04:24:25.285415 2026] [security2:error] [pid 32682:tid 32682] [client 13.230.157.153:62857] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.415test.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.415test.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajpCuQ4k4HTh00LjRjG9-gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-06-23 08:13:26
(9 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 07:41:54
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast ...
show more
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 03:41:47.299936 2026] [security2:error] [pid 20868:tid 20868] [client 13.230.157.153:60951] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.321q.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.321q.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajo4u7yn9lofDxfZ2iVpmAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Kenshin869
2026-06-23 06:21:25
(11 hours ago)
Wordpress unauthorized access attempt
Brute-Force
🇧🇪
cmbplf
2026-06-22 09:46:44
(1 day ago)
364 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-22 06:54:40
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast ...
show more
(mod_security) mod_security (id:225170) triggered by 13.230.157.153 (ec2-13-230-157-153.ap-northeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 02:54:32.971380 2026] [security2:error] [pid 10320:tid 10320] [client 13.230.157.153:57790] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sonicbureau.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sonicbureau.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajjcKC8PEpXWu8kfGQKBBgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack