🇺🇸
TPI-Abuse
2026-10-14 16:53:05
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:53:00.520409 2026] [security2:error] [pid 19489:tid 19489] [client 132.255.134.60:36975] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fundaciondamashcc.org.ec|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fundaciondamashcc.org.ec"] [uri "/wp-json/wp/v2/users"] [unique_id "as-zbNeZ57nnRGQhF1qaigAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 13:37:04
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:36:57.051373 2026] [security2:error] [pid 25099:tid 25099] [client 132.255.134.60:44383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||forwardti.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "forwardti.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as-FeQ1xm2fNH98zqCZmYwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-14 12:26:52
(8 hours ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.60 (ID/Indonesia/-): 1 in the last ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.60 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 132.255.134.60 - - [14/Oct/2026:14:26:47 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" 200 12021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" host=fondazioneilcireneo.it
show less
Port Scan
🇩🇪
FeG Deutschland
2026-10-14 07:02:19
(13 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:22:06
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:21:58.424729 2026] [security2:error] [pid 8288:tid 8288] [client 132.255.134.60:45425] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fattoria-rendena.it|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fattoria-rendena.it"] [uri "/wp-json/wp/v2/users"] [unique_id "as8fhlEqwE4rwuU_3bO-cQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 03:23:39
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:23:31.855489 2026] [security2:error] [pid 1216:tid 1216] [client 132.255.134.60:42397] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||expertprofessionalcleaners.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "expertprofessionalcleaners.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as71s71Dm5jxmmE0A5ASUAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:45:00
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:44:56.177289 2026] [security2:error] [pid 1717:tid 1717] [client 132.255.134.60:57959] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ergocorrect.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ergocorrect.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as60aCTjeDmrIRnwUsAs9QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 14:56:31
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 10:56:27.733615 2026] [security2:error] [pid 11427:tid 11427] [client 132.255.134.60:52253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||edmestonfd.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edmestonfd.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as5Gmw3dplU0Njus9dYxlQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 01:53:19
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 21:53:12.646902 2026] [security2:error] [pid 9234:tid 9234] [client 132.255.134.60:59613] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||diegogamazo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "diegogamazo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as2PCBIMVUexbuQ0_YsgSQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-12 21:37:08
(1 day ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.60 (ID/Indonesia/-): 1 in the last ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.60 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 132.255.134.60 - - [12/Oct/2026:23:37:03 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" 200 11996 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" host=deflorentiis.com
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-12 20:25:15
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 16:25:10.065959 2026] [security2:error] [pid 12115:tid 12115] [client 132.255.134.60:58251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dceabronwilliams.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dceabronwilliams.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as1CJkN6LBaGVmMR5jSNnQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 19:37:32
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:37:27.679628 2026] [security2:error] [pid 9096:tid 9117] [client 132.255.134.60:51735] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||datuinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "datuinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as029zX2wW1o3pYZdPCn8AAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-12 15:13:08
(2 days ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.60 (ID/Indonesia/-): 1 in the last ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.60 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 132.255.134.60 - - [12/Oct/2026:17:13:03 +0200] "GET /wp-json/wp/v2/users HTTP/2.0" 200 4805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "132.255.134.60" host=ctpescara.it
show less
Port Scan
🇩🇪
maxpower
2026-10-12 08:00:23
(2 days ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.60 (ID/Indonesia/-): 1 in the last ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.60 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 132.255.134.60 - - [12/Oct/2026:10:00:20 +0200] "GET /wp-json/wp/v2/users HTTP/2.0" 200 4801 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "132.255.134.60" host=coiet.it
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-12 00:34:17
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 20:34:11.335591 2026] [security2:error] [pid 17185:tid 17185] [client 132.255.134.60:50449] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||celltechs.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "celltechs.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aswrA9y_41qoauQ5wavfdQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
