🇬🇧
abivia
2026-09-30 20:58:17
(1 week ago)
Abivia WAF trigger: Rule scriptKiddies: wp2shell exploit uri: /?rest_route=/batch/v1
Hacking
Web App Attack
🇩🇪
FD-IX
2026-08-07 21:11:06
(2 months ago)
XML-RPC brute-force attack detected by WordPress firewall. 2 failed authentication attempts within t ...
show more
XML-RPC brute-force attack detected by WordPress firewall. 2 failed authentication attempts within the configured time window.
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 01:46:09
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:46:06.028172 2026] [security2:error] [pid 5589:tid 5589] [client 155.212.37.187:24215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||haisten.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "haisten.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajCq3i3WNYF3J0rwYPBGzgAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 14:43:05
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:42:59.221290 2026] [security2:error] [pid 5369:tid 5456] [client 155.212.37.187:36383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gabegabel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gabegabel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajAPcxKqOfCYaLnSeDO0cwAAAc4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 11:57:29
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 07:57:23.501397 2026] [security2:error] [pid 25192:tid 25192] [client 155.212.37.187:63563] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wildpete.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wildpete.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqio_wfvutJ9LAxoGOlMQAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-05-25 14:56:09
(4 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 10:57:47
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 06:57:39.654849 2026] [security2:error] [pid 17318:tid 17318] [client 155.212.37.187:55973] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||velvetculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "velvetculture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahQrIzQ2R478EqSyMqRR0AAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-27 16:39:14
(6 months ago)
apache vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 13:54:36
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 09:54:33.067906 2026] [security2:error] [pid 4132:tid 4144] [client 155.212.37.187:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mindgardens.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mindgardens.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abVomQ73gVn3VFnnaNKnbwAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-01 17:53:48
(7 months ago)
Web Spam
Bad Web Bot
