🇺🇸
TPI-Abuse
2026-07-06 08:18:17
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 04:18:13.076474 2026] [security2:error] [pid 21671:tid 21671] [client 147.124.220.188:51662] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||garantagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "garantagroup.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aktkxYzrqpOkZyHrybNDSgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-07-06 03:28:59
(3 months ago)
(wordpress) Failed wordpress login from 147.124.220.188 (US/United States/Texas/Dallas/emerald3.dove ...
show more
(wordpress) Failed wordpress login from 147.124.220.188 (US/United States/Texas/Dallas/emerald3.doveserver.com/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-05 22:43:59
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:43:52.221447 2026] [security2:error] [pid 31410:tid 31410] [client 147.124.220.188:41086] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||epetsure.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "epetsure.co"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akreKA0LQk4ssH9zGxjcpwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-07-05 11:08:36
(3 months ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-05 04:32:29
(3 months ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 00:02:24
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 20:02:19.138885 2026] [security2:error] [pid 19907:tid 19907] [client 147.124.220.188:47574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nearfieldchrist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nearfieldchrist.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akmfCzYcYGuG5S2lf8LxaQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 23:31:54
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 19:31:49.274075 2026] [security2:error] [pid 28992:tid 28992] [client 147.124.220.188:43046] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||broneksuchanek.com.arsenaultartistmanagement.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "broneksuchanek.com.arsenaultartistmanagement.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akmX5SKjl7bQ8G_4FuEslgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-07-04 15:23:33
(3 months ago)
Probing for exploits
147.124.220.188 - - [04/Jul/2026:17:23:30 +0200] "GET /wp-login.php HTTP/2.0" 3 ...
show more
Probing for exploits
147.124.220.188 - - [04/Jul/2026:17:23:30 +0200] "GET /wp-login.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
147.124.220.188 - - [04/Jul/2026:17:23:31 +0200] "POST /wp-login.php HTTP/2.0" 301 0 "https://v97746.<REDACTED>/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
2026-07-04 13:32:13
(3 months ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
stinpriza
2026-07-04 05:59:49
(3 months ago)
Web App Attack
Web App Attack
🇲🇽
octageeks.com
2026-07-04 04:21:14
(3 months ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 00:33:06
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:33:00.074737 2026] [security2:error] [pid 11276:tid 11276] [client 147.124.220.188:33772] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||davidharrisgriffith.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "davidharrisgriffith.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akhUvKvkAdiwd0nTSewIYgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-04 00:04:44
(3 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 21:20:45
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:20:38.679798 2026] [security2:error] [pid 14430:tid 14430] [client 147.124.220.188:54806] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||prostar.industries|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prostar.industries"] [uri "/wp-json/wp/v2/users/2"] [unique_id "akgnppb3nMsFEa1dsV4QkwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 20:30:15
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 147.124.220.188 (emerald3.doveserver.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:30:12.712344 2026] [security2:error] [pid 11870:tid 11870] [client 147.124.220.188:32872] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vaghyst.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vaghyst.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akgb1KrOWYY7dJPuIUkXyAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack