🇫🇮
KnightIndustries
2026-07-08 21:48:11
(11 hours ago)
2026-07-08T23:48:07.975403+02:00 milkyway wordpress(oldscarborough.com)[2677220]: Authentication att ...
show more
2026-07-08T23:48:07.975403+02:00 milkyway wordpress(oldscarborough.com)[2677220]: Authentication attempt for unknown user [email protected] from 157.22.17.229
2026-07-08T23:48:09.373820+02:00 milkyway wordpress(oldscarborough.com)[2677220]: Authentication attempt for unknown user jfawcett1998 from 157.22.17.229
2026-07-08T23:48:10.793528+02:00 milkyway wordpress(oldscarborough.com)[2677220]: Authentication attempt for unknown user admin from 157.22.17.229
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 14:36:02
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 10:35:49.432417 2026] [security2:error] [pid 9703:tid 9703] [client 157.22.17.229:43199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.csm-dtc.com"] [uri "/wp-config.txt"] [unique_id "aiLexZJb5DL0cfa1YqnpIQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 13:03:28
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 09:03:24.838976 2026] [security2:error] [pid 22138:tid 22138] [client 157.22.17.229:14425] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stardancertantra.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stardancertantra.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afSknF6OBvTh3GQXpiyF9QAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 06:01:56
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 02:01:48.932505 2026] [security2:error] [pid 27691:tid 27691] [client 157.22.17.229:60217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||networkparanoia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "networkparanoia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "actjTIwyKOsnPmo46Rr8ogAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-28 01:30:55
(3 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 18:14:09
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 14:13:49.934421 2026] [security2:error] [pid 18280:tid 18280] [client 157.22.17.229:51271] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mtalame.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mtalame.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acLUXe0Mb7OzTmxNqqMKAgAAADc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 06:24:59
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 02:24:51.357113 2026] [security2:error] [pid 11079:tid 11079] [client 157.22.17.229:64211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||elfinforest.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "elfinforest.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ab-LM5jZQaC70tCv3eLXUAAAACE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-03-17 06:42:38
(3 months ago)
WordPress login attempt
Brute-Force