2025-09-27 07:03:40
(8 months ago)
LP_FAIL on WP_LOGIN, BF_DETECTED
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-08-24 10:11:07
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 154.213.199.166 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 154.213.199.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 24 06:11:01.877251 2025] [security2:error] [pid 6115:tid 6115] [client 154.213.199.166:33249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paulburns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paulburns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aKrlNexoD0nvt9xII8kieQAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2025-08-15 12:22:31
(9 months ago)
Form spam
Web Spam
2025-07-02 05:20:11
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-04-14 00:28:57
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-04-13 17:41:43
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.213.199.166 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 154.213.199.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 13 13:41:40.260932 2025] [security2:error] [pid 3057:tid 3057] [client 154.213.199.166:25901] [client 154.213.199.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||staben.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_v3VB0HKqvqbasf5efWXAAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-09 08:39:40
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.213.199.166 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 154.213.199.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 04:39:36.673161 2025] [security2:error] [pid 2140134:tid 2140134] [client 154.213.199.166:20213] [client 154.213.199.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vendor21.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vendor21.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_YySHrGGHZm6-V9Fg4_KAAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-08 16:27:26
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.213.199.166 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 154.213.199.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 12:27:21.269485 2025] [security2:error] [pid 3004664:tid 3004664] [client 154.213.199.166:39847] [client 154.213.199.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hischurchatwork.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hischurchatwork.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_VOaVcomj1uGhRSXGI8JwAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-03-26 04:04:58
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-11-17 00:25:29
(1 year ago)
Testing cards.
Fraud Orders
🇩🇪
nyuuzyou
2024-11-13 12:58:39
(1 year ago)
Intensive scraping: /web?s=%22What%92s%20Hot%22%20%22Recent%20Changes%22&scraper=mwmbl. User-Agent: ...
show more
Intensive scraping: /web?s=%22What%92s%20Hot%22%20%22Recent%20Changes%22&scraper=mwmbl. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0.
show less
Bad Web Bot
🇩🇪
nyuuzyou
2024-11-05 01:46:17
(1 year ago)
Intensive scraping: /web?s=cpa%20grip%20alternative&country=jv-jv&scraper=wiby. User-Agent: Mozilla/ ...
show more
Intensive scraping: /web?s=cpa%20grip%20alternative&country=jv-jv&scraper=wiby. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15.
show less
Bad Web Bot