🇧🇪
taivas.nl
2026-09-20 15:32:11
(4 hours ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-20 12:20:20
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.com ...
show more
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:20:16.585363 2026] [security2:error] [pid 32538:tid 32538] [client 15.161.176.15:38928] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||johncyphers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "johncyphers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq_PgJTtXNH2snkd0r1vUgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 06:28:28
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.com ...
show more
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 02:28:21.292973 2026] [security2:error] [pid 11861:tid 11861] [client 15.161.176.15:42956] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cubbylure.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cubbylure.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq99Bf7InD5n3iawz3sNAQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-20 01:38:52
(18 hours ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users | 2026-09-20 01:38 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 17:34:40
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.com ...
show more
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 13:34:34.523443 2026] [security2:error] [pid 14026:tid 14026] [client 15.161.176.15:54676] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||casaluzislamujeres.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "casaluzislamujeres.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7HqkR9KdAKPI0_A1VSKwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-19 17:30:52
(1 day ago)
Probing websites for vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 15:30:53
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.com ...
show more
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 11:30:48.199669 2026] [security2:error] [pid 7280:tid 7280] [client 15.161.176.15:52600] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelcarrollgreen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelcarrollgreen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6qqErcmTA7l_USsHacqgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-19 14:21:55
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)
Hacking
🇺🇸
mnsf
2026-09-19 12:05:12
(1 day ago)
Abuse Detected (12)
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-09-19 11:51:23
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 11:05:14
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.com ...
show more
(mod_security) mod_security (id:225170) triggered by 15.161.176.15 (ec2-15-161-176-15.eu-south-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 07:05:10.341392 2026] [security2:error] [pid 32383:tid 32383] [client 15.161.176.15:35844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||morninginc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "morninginc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq5sZsJnMlLNlZolD9APxgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-08-19 09:50:04
(1 month ago)
Wordfence waf block on wp20190711M4
Web App Attack