🇪🇸
librebit
2026-06-30 17:00:48
(8 hours ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-05-29 16:11:39
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 12:11:32.585154 2026] [security2:error] [pid 20517:tid 20517] [client 155.212.39.99:15479] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hazeltrane.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hazeltrane.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahm6tJQC6Ywga29aIqxURQAAABc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-04 01:34:40
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 21:34:34.734674 2026] [security2:error] [pid 13536:tid 13562] [client 155.212.39.99:18297] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newleafpro.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newleafpro.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aff3qjf4tkZrPmb1fj2AMAAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 07:27:10
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 03:27:04.332718 2026] [security2:error] [pid 15995:tid 15995] [client 155.212.39.99:28689] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||towardthesky.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "towardthesky.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae2-SEkcqY4KlOBd6Gn5fwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 02:08:46
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 22:08:39.474207 2026] [security2:error] [pid 11401:tid 11401] [client 155.212.39.99:35531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manaplas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manaplas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae1zp26tiLLBXRSJABlyKgAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-04-25 13:21:35
(2 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-04-18 08:15:43
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 04:15:35.831654 2026] [security2:error] [pid 2794448:tid 2794448] [client 155.212.39.99:51659] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cormanleigh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cormanleigh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeM9p-e5PkqkX34Yk5qBgwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 15:41:41
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 11:41:36.620420 2026] [security2:error] [pid 4089761:tid 4089761] [client 155.212.39.99:59151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||auguststoten.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "auguststoten.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad5gMLF-UNAZT-6uzpsxqwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-22 16:02:53
(3 months ago)
Illegal access attempt blocked by WAF on /wp-login.php, /wp-admin/, /my-account/
Hacking
Web App Attack
🇮🇹
alessio loto
2026-03-18 17:46:12
(3 months ago)
WAF Detection: Security_Scanner_Blocked. AI Confirmed Attack Payload.
Bad Web Bot
🇺🇸
mind5t0rm
2026-03-15 14:02:37
(3 months ago)
(WPLOGIN) WP Login Attack 155.212.39.99 (DE/Germany/-): 3 in the last 3600 secs; Ports: *; Direction ...
show more
(WPLOGIN) WP Login Attack 155.212.39.99 (DE/Germany/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 155.212.39.99 - - [15/Mar/2026:21:01:54 +0700] "GET /wp-login.php HTTP/2.0" 200 2514 "-" "Wget/1.21.4"
155.212.39.99 - - [15/Mar/2026:21:01:55 +0700] "POST /wp-login.php HTTP/2.0" 200 2658 "https://zerowaterthailand.com/wp-login.php" "Wget/1.21.4"
155.212.39.99 - - [15/Mar/2026:21:02:35 +0700] "GET /wp-login.php HTTP/2.0" 200 2514 "-" "curl/8.6.0"
show less
Port Scan
🇬🇧
SecondEdge
2025-10-25 10:47:32
(8 months ago)
A web attack was detected from 155.212.39.99 (United States) against lifeofstu.com (Wordpress).
Web App Attack
🇺🇸
TPI-Abuse
2025-10-19 17:18:10
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 13:18:02.863379 2025] [security2:error] [pid 8905:tid 8905] [client 155.212.39.99:49479] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calogerolawfirm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calogerolawfirm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPUdSuuuFwfJGYhV9sJkOwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack