🇩🇪
4server
2026-09-03 00:02:07
(8 hours ago)
[ThuSep0302:02:01.2879762026][security2:error][pid2131781:tid2131894][client157.22.125.213:0]ModSecu ...
show more
[ThuSep0302:02:01.2879762026][security2:error][pid2131781:tid2131894][client157.22.125.213:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"alessandrolucchini.ch\"][uri\"/xmlrpc.php\"][unique_id\"api4-beOfKQSX6Yla5XeMAAAAJg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
FD-IX
2026-09-02 23:04:24
(9 hours ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
2026-07-23 04:01:04
(1 month ago)
PARMACOM WEBEXPLOIT 157.22.125.213 (157.22.125.213)
Web App Attack
🇺🇸
oralunal
2026-06-18 20:38:32
(2 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 16:42:28
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.125.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.125.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 12:42:24.262162 2026] [security2:error] [pid 19435:tid 19435] [client 157.22.125.213:24981] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||yuichiro.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "yuichiro.us"] [uri "/wp-json/wp/v2/users"] [unique_id "ac6ccJbghcmPFGqrS43GzAAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 14:14:59
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.125.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.125.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 10:14:50.763828 2026] [security2:error] [pid 32270:tid 32270] [client 157.22.125.213:61683] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rannals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rannals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ackz2gNcvw0f3Tr9GhsZbwAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-03-28 14:19:08
(5 months ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 04:36:17
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.125.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.125.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 00:36:11.354792 2026] [security2:error] [pid 1149079:tid 1149079] [client 157.22.125.213:31701] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||leewis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "leewis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acYJOxgwCETV4jiPUZy8BQAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-18 19:06:00
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇳🇿
Tripwire
2026-03-18 05:53:41
(5 months ago)
Probing for Wordpress - /wp-login.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-30 03:22:26
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.125.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.125.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 22:22:22.679865 2025] [security2:error] [pid 23196:tid 23196] [client 157.22.125.213:30151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soundtrax.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVNFbg5UDrOcLu6U4OBB6wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack