🇺🇸
kosada.com
2026-06-24 21:16:29
(1 day ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-06-24 15:40:43
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 11:40:35.226104 2026] [security2:error] [pid 3534:tid 3534] [client 130.49.10.175:61935] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||puoci.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puoci.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajv6c4bHgrqVlO9YRp05KAAAADc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 04:41:38
(3 days ago)
(mod_security) mod_security (id:211030) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211030) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 00:41:33.234983 2026] [security2:error] [pid 28316:tid 28316] [client 130.49.10.175:11835] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||3905ccn.org|F|2"] [data "Matched Data: ('~'||( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "3905ccn.org"] [uri "/lookupLicensee.php"] [unique_id "aji8_dRg5-H7KeDS4YzQaQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 06:02:13
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 02:02:09.319515 2026] [security2:error] [pid 3068:tid 3068] [client 130.49.10.175:16101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ramoundos-systems.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ramoundos-systems.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiug4eV7tEhAL621f0HuRAAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-11 02:03:49
(2 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-06-07 17:50:21
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:50:13.829026 2026] [security2:error] [pid 23636:tid 23636] [client 130.49.10.175:39097] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donnysimonton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donnysimonton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiWvVapztQuGzPFQ71UjSAAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-31 17:47:23
(3 weeks ago)
Web password guessing
Brute-Force
🇺🇸
ambor
2026-05-31 16:39:12
(3 weeks ago)
Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ...
show more
Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Apache-HttpClient/4.5.13 (Java/17.0.18)
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 14:04:25
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 10:04:20.221681 2026] [security2:error] [pid 24797:tid 24797] [client 130.49.10.175:60043] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||myuscpa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "myuscpa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahruZBpWkcvHAdDMMCfP-QAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 14:17:54
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 10:17:49.340858 2026] [security2:error] [pid 4981:tid 5073] [client 130.49.10.175:58095] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jeffgolden.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jeffgolden.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag8UDaRdw02cIjKwwsQsDAAAAMA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 10:38:33
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.10.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 06:38:25.280017 2026] [security2:error] [pid 8203:tid 8203] [client 130.49.10.175:36743] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||benshermanguitar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "benshermanguitar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag7goVmBZAVZKxZn-m6B2wAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-05-20 04:43:40
(1 month ago)
WordPress login attempt
Brute-Force
2026-05-08 02:15:48
(1 month ago)
SQL injection, multiple attempts.
SQL Injection
🇩🇪
ManagedStack
2026-04-15 23:01:47
(2 months ago)
Wordpress Attack
Web App Attack
2025-12-09 09:50:34
(6 months ago)
botnet
DDoS Attack