🇺🇸
TPI-Abuse
2026-07-27 20:47:11
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 16:47:07.062785 2026] [security2:error] [pid 13762:tid 13762] [client 130.49.78.120:64621] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nexthop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nexthop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amfDyxCkNrykFAA4J3uz2wAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-27 13:01:03
(1 day ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 07:35:15
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 03:35:09.005804 2026] [security2:error] [pid 2158708:tid 2158708] [client 130.49.78.120:10027] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wilsontribe.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wilsontribe.org"] [uri "/wp-json/wp/v2/users"] [unique_id "amW4rcolvjyUx_h92EfLcgAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 22:01:01
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 18:00:53.783507 2026] [security2:error] [pid 26988:tid 26988] [client 130.49.78.120:12051] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||34thprs.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "34thprs.org"] [uri "/wp-json/wp/v2/users"] [unique_id "al_sFZEktmSybyiFr85ygwAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 21:48:27
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 17:48:21.854012 2026] [security2:error] [pid 4877:tid 4877] [client 130.49.78.120:56685] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||barabesi.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barabesi.net"] [uri "/wp-json/wp/v2/users"] [unique_id "algAJU9I-kSOTmcI9F0NJwAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-17 18:04:20
(1 month ago)
SQL injection, multiple attempts.
SQL Injection
🇺🇸
TPI-Abuse
2026-05-21 21:09:31
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 17:09:27.227628 2026] [security2:error] [pid 22716:tid 22716] [client 130.49.78.120:59923] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ccoxes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ccoxes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag90h1vWSz89LZOcDQ_iuwAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 00:58:49
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 20:58:45.798786 2026] [security2:error] [pid 9738:tid 9738] [client 130.49.78.120:52137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||heron-ent.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heron-ent.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag5Yxbc80qvVv_PKgrX8ZwAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-05-14 14:19:05
(2 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
kosada.com
2026-05-13 15:07:01
(2 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-12 12:34:55
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 08:34:49.022118 2026] [security2:error] [pid 28483:tid 28483] [client 130.49.78.120:59215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kwtlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kwtlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agMead62IkVu4ERbiOX7dgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-04-06 01:09:20
(3 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-04-05 00:33:32
(3 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-04-03 19:53:29
(3 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-04-02 18:07:56
(3 months ago)
Web App Attack
Web App Attack