🇺🇸
nationaleventpros.com
2026-06-14 18:45:30
(7 hours ago)
WordPress login attempt
Brute-Force
🇺🇸
kosada.com
2026-06-11 18:00:22
(3 days ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-06-11 12:00:53
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 130.49.112.219 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.112.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 08:00:47.492727 2026] [security2:error] [pid 7696:tid 7696] [client 130.49.112.219:53897] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||btsalesrep.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "btsalesrep.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqjbwcZusYCFDI_-jBRtgAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 17:48:52
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 130.49.112.219 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.112.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 13:48:45.434960 2026] [security2:error] [pid 4038:tid 4038] [client 130.49.112.219:30493] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chrismonty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chrismonty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahM5_aU6j9srLNrp6Z7GpgAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-05-14 18:14:08
(1 month ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 03:04:29
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 130.49.112.219 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.112.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 23:04:25.731727 2026] [security2:error] [pid 16290:tid 16290] [client 130.49.112.219:54881] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geceindia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geceindia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agFHOXQq4wTcNNgEjUmqSQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-03-26 03:35:12
(2 months ago)
Web password guessing
Brute-Force
🇩🇪
kjaerulff
2026-03-23 11:41:36
(2 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
ambor
2026-03-06 02:24:39
(3 months ago)
Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: ...
show more
Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
show less
Web App Attack
🇫🇷
masterguru
2025-11-30 13:38:41
(6 months ago)
(FolderList) Hacking file access attemp in wordpress site from 130.49.112.219 (TR/Turkey/-): 1 in th ...
show more
(FolderList) Hacking file access attemp in wordpress site from 130.49.112.219 (TR/Turkey/-): 1 in the last 3600 secs (0-195)
show less
Hacking
2025-11-19 11:08:36
(6 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH