🇺🇸
TPI-Abuse
2026-10-12 03:52:50
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 23:52:44.312385 2026] [security2:error] [pid 1336:tid 1336] [client 155.212.108.69:40471] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||insidepublications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "insidepublications.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asxZjA3snLtZT0b6zb-2PQAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 19:57:38
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 15:57:31.082177 2026] [security2:error] [pid 5293:tid 5293] [client 155.212.108.69:28211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hodges-web.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hodges-web.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asvqK5VBEb7ekjEX1B57bQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 17:50:41
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 13:50:35.087284 2026] [security2:error] [pid 27132:tid 27132] [client 155.212.108.69:44061] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcgmcg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcgmcg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asvMa0W2XIfPfurUfWiGEQAAABw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-05 13:36:58
(6 days ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
2026-10-03 14:19:11
(1 week ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-10-02 07:19:57
(1 week ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 17:42:03
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:41:54.776804 2026] [security2:error] [pid 29464:tid 29464] [client 155.212.108.69:29243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||no1sicko.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "no1sicko.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ar6bYrynTsUZJXputqjR0wAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-30 15:49:54
(1 week ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 06:49:44
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 02:49:38.982144 2026] [security2:error] [pid 30315:tid 30315] [client 155.212.108.69:42657] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||digifonics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "digifonics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aryxAnfs5dSL3HiDmzQNcgAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-30 04:56:00
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-29 18:36:48
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:36:41.543188 2026] [security2:error] [pid 23119:tid 23119] [client 155.212.108.69:29457] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||christianebooks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "christianebooks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arwFOfQL46-tSfJ1ZQSN0QAAAC4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-09-28 15:12:47
(1 week ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-05-01 13:04:34
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.108.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 09:04:26.276715 2026] [security2:error] [pid 23527:tid 23527] [client 155.212.108.69:18129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kippert.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kippert.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afSk2oE6rYwdJ8be8mWtgQAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-03-28 22:38:43
(6 months ago)
WP User Enumeration, WP Author Enumeration
Web App Attack
🇩🇪
LRob
2026-03-19 07:00:40
(6 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
