🇩🇪
4server
2026-08-27 12:51:16
(1 day ago)
[ThuAug2714:51:11.8211232026][security2:error][pid1203944:tid1204075][client130.49.78.232:0]ModSecur ...
show more
[ThuAug2714:51:11.8211232026][security2:error][pid1203944:tid1204075][client130.49.78.232:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"feldenkraistherapy.ch\"][uri\"/xmlrpc.php\"][unique_id\"apAyv3NxaM5NMdYXCtohRgAAAQ8\"]
show less
Port Scan
Brute-Force
Web App Attack
🇨🇭
backslash
2026-05-23 08:12:00
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-05 09:55:09
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:55:00.903414 2026] [security2:error] [pid 30017:tid 30017] [client 130.49.78.232:24019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||garysgates.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "garysgates.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adIxdGLbPGxbpekRB9szMAAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 22:20:16
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 18:20:10.208461 2026] [security2:error] [pid 23070:tid 23070] [client 130.49.78.232:58103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calfirstrealty.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calfirstrealty.net"] [uri "/wp-json/wp/v2/users"] [unique_id "acBrGtcIQ_V0Egq4Civ2wQAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-03-22 20:05:02
(5 months ago)
trying wp-login.php/xmlrpc.php 41 times in 1 minutes
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 11:41:59
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 07:41:54.076597 2026] [security2:error] [pid 19023:tid 19023] [client 130.49.78.232:53849] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fnavarro.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fnavarro.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab_Vgiq4clZ_sKbdMuU8cwAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-03-21 22:24:41
(5 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-03-21 15:15:36
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 11:15:29.700644 2026] [security2:error] [pid 11771:tid 11771] [client 130.49.78.232:52313] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||macryder.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "macryder.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab62EZLiuTrj1qqfk_jOcQAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 10:55:42
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.78.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 06:55:38.758044 2026] [security2:error] [pid 32746:tid 32746] [client 130.49.78.232:64873] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theholleys.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theholleys.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ab55KkpBYgx7UKN0lFfqGwAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack