🇺🇸
TPI-Abuse
2026-06-12 18:46:27
(12 minutes ago)
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:46:22.642170 2026] [security2:error] [pid 13408:tid 13408] [client 137.184.233.49:48214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rajabarber.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rajabarber.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aixT_gwppIV9ZnBRvC3pBQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-06-12 18:41:09
(17 minutes ago)
(wordpress) Failed wordpress login from 137.184.233.49 (US/United States/-): (CF_ENABLE)
Brute-Force
2026-06-12 18:10:12
(48 minutes ago)
2026-06-12T20:10:11.360196+02:00 zanati wp(bikeschool.co.za)[1292625]: Blocked user enumeration atte ...
show more
2026-06-12T20:10:11.360196+02:00 zanati wp(bikeschool.co.za)[1292625]: Blocked user enumeration attempt from 137.184.233.49
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 18:04:44
(54 minutes ago)
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:04:37.002730 2026] [security2:error] [pid 7937:tid 7937] [client 137.184.233.49:41940] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||answeringamerica.net.hellomdinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "answeringamerica.net.hellomdinc.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aixKNMpZieWDLJMsxl9RWAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 17:26:17
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 13:26:09.416442 2026] [security2:error] [pid 2351:tid 2351] [client 137.184.233.49:50474] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stonehill.myomni.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stonehill.myomni.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aixBMb01IgEs2oKncAyYNQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xxkodedxx
2026-06-12 17:01:16
(1 hour ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10m window.
Origin: US / AS14061 DigitalOcean, LLC
Active: 17:00:28 UTC
Volume: 1 HTTP req
Probed: /wp-json/wc/v2/customers?per_page=100&_fields=username
Status mix: 444×1
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-06-12 17:01:01
(1 hour ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 16:47:23
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 12:47:20.405472 2026] [security2:error] [pid 23851:tid 23851] [client 137.184.233.49:34516] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bostonmarathonstories.bostonlog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bostonmarathonstories.bostonlog.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiw4GLtSKeEY0pMuAcga2wAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 16:26:43
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 12:26:38.101239 2026] [security2:error] [pid 31039:tid 31039] [client 137.184.233.49:56112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||caddydad.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "caddydad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwzPswqYrlpq4OA-wRT8wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-06-12 16:02:38
(2 hours ago)
1.534 requests to many distinct domains in 1 hour (2w4d8h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-12 15:50:06
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 11:50:00.953546 2026] [security2:error] [pid 11593:tid 11593] [client 137.184.233.49:45390] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gegkal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gegkal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwqqN5R8I9FXAn_sy0CkAAAAAk"], referer: https://gegkal.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-12 15:49:14
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇩🇪
big-cloud.nl
2026-06-12 15:43:30
(3 hours ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 15:21:30
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 137.184.233.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 11:21:26.642244 2026] [security2:error] [pid 21073:tid 21073] [client 137.184.233.49:60890] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brainstormer.visionremota.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brainstormer.visionremota.info"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwj9gEIbGzB9F5heenY4AAAAAE"], referer: https://brainstormer.visionremota.info/
show less
Brute-Force
Bad Web Bot
Web App Attack