🇫🇷
SpaceHost-Server
2026-06-30 22:38:32
(18 hours ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 04:39:53
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 135.125.241.35 (mta5.gymserver.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 135.125.241.35 (mta5.gymserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 00:39:49.271229 2026] [security2:error] [pid 13207:tid 13207] [client 135.125.241.35:51306] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.grandriverhomes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.grandriverhomes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akNIlX7Fm1P_ktgZsBLFeAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 04:04:54
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 135.125.241.35 (mta5.gymserver.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 135.125.241.35 (mta5.gymserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 00:04:48.763424 2026] [security2:error] [pid 23836:tid 23836] [client 135.125.241.35:25306] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.glendaleheritage.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.glendaleheritage.org"] [uri "/glendale/wp-json/wp/v2/users"] [unique_id "akNAYMeDCZ5umsN2hcwSCwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-30 03:26:29
(1 day ago)
Blocked by CSF 13 firewall - Rule: US/United States/mta5.gymserver.com
Web App Attack
🇩🇪
Petros Stefanakis
2026-06-30 01:53:38
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 135.125.241.35 (FR/France/mta5.gymserve ...
show more
(mod_security) mod_security triggered on hostname [redacted] 135.125.241.35 (FR/France/mta5.gymserver.com)
show less
SQL Injection
🇩🇪
akasolutions.de
2026-06-30 01:25:27
(1 day ago)
(wordpress) Failed wordpress login from 135.125.241.35 (FR/France/mta5.gymserver.com)
Brute-Force
🇺🇸
mnsf
2026-06-30 01:05:02
(1 day ago)
Abuse Detected (40)
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-06-30 00:35:42
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 00:27:45
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 135.125.241.35 (mta5.gymserver.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 135.125.241.35 (mta5.gymserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 20:27:41.410820 2026] [security2:error] [pid 24106:tid 24106] [client 135.125.241.35:12094] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fattoria-rendena.it|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fattoria-rendena.it"] [uri "/wp-json/wp/v2/users"] [unique_id "akMNfcdbcMaPTIzlH3yePwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-06-29 23:18:46
(1 day ago)
WP Authentication attempt for unknown user
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-06-29 23:10:05
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-29 23:05:07
(1 day ago)
Too many Status 40X (43)
Scanning/Probing (43)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 22:47:16
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 135.125.241.35 (mta5.gymserver.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 135.125.241.35 (mta5.gymserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 18:47:13.451741 2026] [security2:error] [pid 31031:tid 31031] [client 135.125.241.35:27468] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ergocorrect.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ergocorrect.com"] [uri "/site/wp-json/wp/v2/users"] [unique_id "akL18SrIXzii6a7h2qLs7QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-18 21:05:48
(1 week ago)
Too many Status 40X (40)
Scanning/Probing (40)
Brute-Force
Web App Attack
2024-10-14 10:30:25
(1 year ago)
TRAPPED EMAIL 135.125.241.35 (mta5.gymserver.com)
Email Spam