2026-11-06 18:18:30
UTC ·
(3 days ago)
(plesk-panel) Failed plesk-panel login with username [redacted]): (CF_ENABLE)
Brute-Force
🇩🇪
EGP Abuse Dept
2026-11-06 01:52:10
UTC ·
(4 days ago)
Scanning for web/db/file exploits on brederaad-010.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 00:40:38
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:40:33.703806 2026] [security2:error] [pid 29949:tid 29949] [client 152.42.185.217:63268] ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:40:33.703806 2026] [security2:error] [pid 29949:tid 29949] [client 152.42.185.217:63268] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcarrollcommunications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcarrollcommunications.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au0iAVI-d58dcnQPxsECFwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 00:23:49
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:23:43.136974 2026] [security2:error] [pid 27214:tid 27214] [client 152.42.185.217:60656] ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:23:43.136974 2026] [security2:error] [pid 27214:tid 27214] [client 152.42.185.217:60656] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.zezel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.zezel.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au0eD0sF4MkWJ-v4ZPOvkgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 00:10:37
UTC ·
(4 days ago)
abuse ssl access
Hacking
Brute-Force
Web App Attack
2026-11-06 00:02:17
UTC ·
(4 days ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 23:58:50
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:58:46.781207 2026] [security2:error] [pid 4257:tid 4257] [client 152.42.185.217:51614] M ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:58:46.781207 2026] [security2:error] [pid 4257:tid 4257] [client 152.42.185.217:51614] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geckoturner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geckoturner.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au0YNsqLKbIEzvVSSfdj6gAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-11-05 23:54:02
UTC ·
(4 days ago)
Abuse on login/xmlrpc
Brute-Force
🇺🇸
TPI-Abuse
2026-11-05 23:25:35
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:25:29.727006 2026] [security2:error] [pid 3930356:tid 3930378] [client 152.42.185.217:59 ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:25:29.727006 2026] [security2:error] [pid 3930356:tid 3930378] [client 152.42.185.217:59255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.certifiedebusinessconsultant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.certifiedebusinessconsultant.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au0QaSX4sgzUOHhHHvDD6QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-05 23:20:09
UTC ·
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
FeG Deutschland
2026-11-05 22:58:03
UTC ·
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇫🇷
ELYAZ
2026-11-05 22:34:05
UTC ·
(4 days ago)
(wordpress) Failed wordpress login from 152.42.185.217 (SG/Singapore/-): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-11-05 22:17:00
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 17:16:53.117969 2026] [security2:error] [pid 15559:tid 15559] [client 152.42.185.217:62502] ...
show more
(mod_security) mod_security (id:225170) triggered by 152.42.185.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 17:16:53.117969 2026] [security2:error] [pid 15559:tid 15559] [client 152.42.185.217:62502] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ourdailybroad.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ourdailybroad.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au0AVaGhu6MS3WUBtB_eyQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-05 21:59:44
UTC ·
(4 days ago)
Attempt to POST to xmlrpc.php at 2026-11-05T21:59:44+00:00
Brute-Force
Web App Attack
2026-11-05 20:24:55
UTC ·
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
