🇷🇴
INTEQ
2026-07-20 19:06:21
(1 month ago)
Web attack from 143.198.103.235
Web App Attack
🇧🇾
lns.bz
2026-07-20 17:10:56
(1 month ago)
Banned for trying to access xmlrpc [BY]
Web App Attack
🇺🇸
lostswordfish.com
2026-07-20 06:38:05
(1 month ago)
Wordfence waf block on 1105merrystreet
Web App Attack
🇺🇸
mnsf
2026-07-10 03:05:12
(1 month ago)
Login Too Frequent (11)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-22 22:27:06
(2 months ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 08:44:58
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 04:44:50.265082 2026] [security2:error] [pid 28542:tid 28542] [client 143.198.103.235:47834] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.wild-goose.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.wild-goose.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajj2Ar067FlBUkXbignz6AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 03:32:35
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 23:32:28.479378 2026] [security2:error] [pid 14780:tid 14780] [client 143.198.103.235:55036] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fritsknuf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fritsknuf.com"] [uri "/blog/wp-json/wp/v2/users"] [unique_id "ajiszE-eoHIo-eVXRA3pPgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-21 22:26:34
(2 months ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 20:03:22
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 16:03:18.122773 2026] [security2:error] [pid 29940:tid 29940] [client 143.198.103.235:48434] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kairoslogammakmur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajhDhjYsNhIjXTS8gjG_HQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 16:59:13
(2 months ago)
[server.tmg.gr] httpd-suspicious-path: sites=ikee.gr; logs=/var/log/httpd/domains/ikee.gr.log; sampl ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=ikee.gr; logs=/var/log/httpd/domains/ikee.gr.log; samples=/wp-json/wp/v2/users | /?author=1 | /author/admin/
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-06-15 12:52:25
(2 months ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-05-19 18:56:17
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 14:56:09.864274 2026] [security2:error] [pid 23752:tid 23752] [client 143.198.103.235:55960] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||matt-bechtel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "matt-bechtel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agyySWMN2Y8SMpedfsyLcgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 02:15:04
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 22:14:56.308411 2026] [security2:error] [pid 14218:tid 14218] [client 143.198.103.235:58958] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.talkingmess.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.talkingmess.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agvHoMC9Xf2DnPeoy5jbWgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 15:16:38
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 11:16:30.367685 2026] [security2:error] [pid 10698:tid 10698] [client 143.198.103.235:57342] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cosplayculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cosplayculture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agstTsuJH11xydgOiOE1ggAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 20:35:06
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 143.198.103.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 16:34:58.008901 2026] [security2:error] [pid 32028:tid 32028] [client 143.198.103.235:39128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jacquelineperriam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jacquelineperriam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agomcY7G6Q9DF_ZJP5j6ygAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack