🇬🇧
consul.to
2026-07-31 18:25:55
(12 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇹🇷
rtbh.com.tr
2025-09-22 20:08:56
(10 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-09-21 20:08:55
(10 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-09-21 00:08:55
(10 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-09-20 20:08:55
(10 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇧🇪
taivas.nl
2025-09-20 09:32:10
(10 months ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-20 08:57:38
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 04:57:33.826600 2025] [security2:error] [pid 5882:tid 5882] [client 152.42.164.148:50135] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||constructiondomex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "constructiondomex.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aM5sffiWFSZP4Zmm6XfICgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-20 08:33:40
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 04:33:36.341225 2025] [security2:error] [pid 25778:tid 25778] [client 152.42.164.148:59308] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.consolidatedoperationsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.consolidatedoperationsgroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aM5m4Ie_JhF2extrSklgEgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2025-09-20 08:16:07
(10 months ago)
coe-7 : Trying access unauthorized files/dir=>//wp-includes/wlwmanifest.xml
Hacking
🇺🇸
bigwavedave
2025-09-20 05:48:37
(10 months ago)
Wordpress Attack
Web App Attack
🇺🇸
TPI-Abuse
2025-09-20 05:24:33
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 01:24:29.008269 2025] [security2:error] [pid 5190:tid 5190] [client 152.42.164.148:54227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.concentricsteel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.concentricsteel.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aM46jSZZcvySZP3to8mkFgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-20 04:57:58
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 00:57:52.232431 2025] [security2:error] [pid 1195:tid 1195] [client 152.42.164.148:56990] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.computerpartsrecovery.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.computerpartsrecovery.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aM40UExpihCQZj0wwCDKEwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2025-09-20 04:11:56
(10 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2025-09-20 04:05:19
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 00:05:14.619440 2025] [security2:error] [pid 4714:tid 4714] [client 152.42.164.148:60850] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kerrywood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kerrywood.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aM4n-sPTx2fSDD1vfC1pHwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-20 02:10:23
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.164.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 22:10:20.012571 2025] [security2:error] [pid 29094:tid 29094] [client 152.42.164.148:49753] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cometoorderva.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cometoorderva.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aM4NDDBtMLAYqjLBxaEHIwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack