🇪🇸
librebit
2026-09-16 05:37:09
(3 days ago)
Brute force
Brute-Force
🇺🇸
Ben Schoolland
2026-09-15 02:52:45
(4 days ago)
Requested known WordPress backdoor/scanner-only paths. No legitimate use.
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-16 12:13:05
(2 months ago)
Brute force
Brute-Force
🇺🇸
kosada.com
2026-06-07 16:49:43
(3 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-30 12:53:41
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 08:53:37.110024 2026] [security2:error] [pid 7281:tid 7281] [client 130.49.9.144:24605] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emelecsrl.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emelecsrl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahrd0bDLeAvzpdxpg84_0gAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 22:56:37
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 18:56:32.354789 2026] [security2:error] [pid 20130:tid 20130] [client 130.49.9.144:46059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ramoundos-systems.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ramoundos-systems.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahOCIPMSVz3fn6MolDr51gAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-21 21:31:08
(3 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-21 14:17:08
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 10:17:03.594554 2026] [security2:error] [pid 7357:tid 7357] [client 130.49.9.144:57093] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||spacebooger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "spacebooger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag8T31hoy8wfLCbnwF0XowAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
solution.it
2026-05-16 10:57:14
(4 months ago)
[Sat May 16 12:57:13.810387 2026] [php7:error] [pid 3995252:tid 3995252] [client 130.49.9.144:58219] ...
show more
[Sat May 16 12:57:13.810387 2026] [php7:error] [pid 3995252:tid 3995252] [client 130.49.9.144:58219] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat, referer: https://www.google.com
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 13:50:56
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 09:50:49.676588 2026] [security2:error] [pid 2460:tid 2460] [client 130.49.9.144:14411] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||med-engineering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "med-engineering.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agSBucQueG_odA36kownAQAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-05-13 06:01:00
(4 months ago)
IPBlock protected site ID [4055-d][s=01].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 02:51:13
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 22:51:07.550887 2026] [security2:error] [pid 20845:tid 20845] [client 130.49.9.144:64469] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae7PG29zqxmrCRSU14xYKgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 15:11:57
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 11:11:51.390501 2026] [security2:error] [pid 27810:tid 27810] [client 130.49.9.144:33053] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lawrencehale.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lawrencehale.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aclBN16TvaxTdeTZMmEn-wAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 10:27:34
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 06:27:25.200078 2026] [security2:error] [pid 14289:tid 14289] [client 130.49.9.144:25053] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jambmaster.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jambmaster.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acj-jXX1-hG6Lcb70wnKtwAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 01:12:08
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 130.49.9.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 21:11:59.807433 2026] [security2:error] [pid 26648:tid 26648] [client 130.49.9.144:28191] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||actability.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "actability.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acSH33eQgEyhSMAJ-NgO-gAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack