๐บ๐ธ
TPI-Abuse
2026-10-14 23:41:39
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 138.59.173.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 138.59.173.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:41:32.888998 2026] [security2:error] [pid 20940:tid 20950] [client 138.59.173.31:34770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||peterhansenranch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peterhansenranch.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "atATLEM9m4MuglJUk-O5YwAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
gandaflux
2026-10-14 21:20:50
(9 hours ago)
138.59.173.31 [redacted-domain] - [14/Oct/2026:23:20:20 +0200] "GET /wp-json/oembed/1.0/embed?url=ht ...
show more
138.59.173.31 [redacted-domain] - [14/Oct/2026:23:20:20 +0200] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2F[redacted-domain]&format=json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
138.59.173.31 [redacted-domain] - [14/Oct/2026:23:20:30 +0200] "GET /feed/json/ HTTP/2.0" 404 20842 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
138.59.173.31 [redacted-domain] - [14/Oct/2026:23:20:40 +0200] "GET /wp-json/authorsy/v1/authors HTTP/2.0" 404 135 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
138.59.173.31 [redacted-domain] - [14/Oct/2026:23:20:41 +0200] "GET /wp-json/decent-comments/v1/authors HTTP/2.0" 404 135 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-10-14 20:06:33
(10 hours ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 19:43:09
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 138.59.173.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 138.59.173.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 15:43:04.197065 2026] [security2:error] [pid 21925:tid 21925] [client 138.59.173.31:38606] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kathydumesnilart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kathydumesnilart.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as6JyJVwE3nbPONFjyWE1wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-10-07 00:43:05
(1 week ago)
Shop search flood (L7 DDoS) | path: /7-velo-electrique-ville | query: q=Taille-M/Marque-Bergamont-La ...
show more
Shop search flood (L7 DDoS) | path: /7-velo-electrique-ville | query: q=Taille-M/Marque-Bergamont-Lapierre-Orbea | src_port: 45960
show less
DDoS Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-01 09:31:42
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 138.59.173.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 138.59.173.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 05:31:34.088411 2026] [security2:error] [pid 17741:tid 17741] [client 138.59.173.31:54380] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.odinathletes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.odinathletes.com"] [uri "/"] [unique_id "ar4odj8ldlajjceXWiI_bwAAAAw"], referer: https://qualitybacklinkgenerator.online/dir/editorial-seo-backlinks-152316
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 02:04:04
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 138.59.173.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 138.59.173.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 22:03:55.896937 2026] [security2:error] [pid 30496:tid 30496] [client 138.59.173.31:49934] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||glolady.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "glolady.com"] [uri "/app/store.sql"] [unique_id "arcoCwrMYSybvyz7DNm5lQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-21 00:52:02
(3 weeks ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Bad Web Bot
