🇺🇸
NRVDigital
2026-02-14 19:53:00
UTC ·
(8 months ago)
attempted logins to wordpress
Hacking
🇺🇸
TPI-Abuse
2026-02-07 15:21:30
UTC ·
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 10:21:22.138108 2026] [security2:error] [pid 22253:tid 22260] [client 154.199.15.43:23926] M ...
show more
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 10:21:22.138108 2026] [security2:error] [pid 22253:tid 22260] [client 154.199.15.43:23926] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rockabyecotons.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rockabyecotons.com"] [uri "/wp-login.php"] [unique_id "aYdYcmSlVoCsLZiPiT2jhwAAAEE"], referer: http://rockabyecotons.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-13 05:47:18
UTC ·
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 00:47:14.427263 2026] [security2:error] [pid 11770:tid 11770] [client 154.199.15.43:27880] M ...
show more
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 00:47:14.427263 2026] [security2:error] [pid 11770:tid 11770] [client 154.199.15.43:27880] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||barigby.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "barigby.com"] [uri "/wp-login.php"] [unique_id "aWXcYvvwmqt3k92X2z_o5AAAAAM"], referer: https://barigby.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-12 16:20:18
UTC ·
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 11:20:15.159840 2026] [security2:error] [pid 8971:tid 8971] [client 154.199.15.43:32850] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 11:20:15.159840 2026] [security2:error] [pid 8971:tid 8971] [client 154.199.15.43:32850] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jolankagroup.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jolankagroup.com"] [uri "/wp-login.php"] [unique_id "aWUfP3ubrHY_r1Q07-x0MAAAAA8"], referer: http://jolankagroup.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-12 01:06:28
UTC ·
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 11 20:06:23.848426 2026] [security2:error] [pid 1949440:tid 1949440] [client 154.199.15.43:4293 ...
show more
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 11 20:06:23.848426 2026] [security2:error] [pid 1949440:tid 1949440] [client 154.199.15.43:42936] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.passy.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.passy.us"] [uri "/wp-login.php"] [unique_id "aWRJDwJgXQFr6PR2AihbfgAAABE"], referer: http://passy.us/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-11 02:47:46
UTC ·
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 10 21:47:41.057692 2026] [security2:error] [pid 28779:tid 28779] [client 154.199.15.43:45530] M ...
show more
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 10 21:47:41.057692 2026] [security2:error] [pid 28779:tid 28779] [client 154.199.15.43:45530] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hendersonhomes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hendersonhomes.com"] [uri "/wp-login.php"] [unique_id "aWMPTX2TIHceHxaF4yuxhgAAAAQ"], referer: http://hendersonhomes.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-01-05 06:42:18
UTC ·
(10 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2025-12-31 02:49:59
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 21:49:53.012202 2025] [security2:error] [pid 29507:tid 29507] [client 154.199.15.43:45410] M ...
show more
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 21:49:53.012202 2025] [security2:error] [pid 29507:tid 29507] [client 154.199.15.43:45410] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.humbliaslaw.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.humbliaslaw.com"] [uri "/wp-login.php"] [unique_id "aVSPUUSXZEM_FXTlRRHThgAAAAo"], referer: http://www.humbliaslaw.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-31 00:58:57
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-24 21:29:39
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 16:29:32.778347 2025] [security2:error] [pid 2378:tid 2378] [client 154.199.15.43:28182] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 16:29:32.778347 2025] [security2:error] [pid 2378:tid 2378] [client 154.199.15.43:28182] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.staben.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.staben.com"] [uri "/wp-login.php"] [unique_id "aUxbPFztRHw3sUj3ELe_FwAAAAM"], referer: https://www.staben.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-22 10:05:55
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 05:05:49.164661 2025] [security2:error] [pid 7505:tid 7505] [client 154.199.15.43:48790] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 05:05:49.164661 2025] [security2:error] [pid 7505:tid 7505] [client 154.199.15.43:48790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/wp-login.php"] [unique_id "aUkX_dgjOucMssv02W9QeQAAAAM"], referer: http://persnicketyinc.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
F242
2025-12-19 12:36:27
UTC ·
(10 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇩🇪
F242
2025-12-03 02:25:58
UTC ·
(11 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 02:36:39
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 21:36:32.874412 2025] [security2:error] [pid 5878:tid 5878] [client 154.199.15.43:60921] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 21:36:32.874412 2025] [security2:error] [pid 5878:tid 5878] [client 154.199.15.43:60921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.method1.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.method1.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSkKsIVQ6DAij-q7mJotZgAAAAs"], referer: http://method1.net/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-22 07:17:21
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 22 02:17:15.088047 2025] [security2:error] [pid 2377:tid 2381] [client 154.199.15.43:25377] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 154.199.15.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 22 02:17:15.088047 2025] [security2:error] [pid 2377:tid 2381] [client 154.199.15.43:25377] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||orthopedica.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "orthopedica.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSFje2KzbhhfCzM_k0rf0wAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack