🇺🇸
TPI-Abuse
2026-07-29 21:22:14
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.151 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 17:22:07.633873 2026] [security2:error] [pid 29534:tid 29534] [client 157.22.75.151:50877] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ejnes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ejnes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ampu_y9rH0BW5uBo7SITtQAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 23:19:50
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.151 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 19:19:45.776524 2026] [security2:error] [pid 2526624:tid 2526627] [client 157.22.75.151:32253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lauricella.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lauricella.us"] [uri "/wp-json/wp/v2/users"] [unique_id "amk5Ef78yt2GpgUYGwRnvQAAAIE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 22:26:24
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.151 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 18:26:18.623152 2026] [security2:error] [pid 227970:tid 227970] [client 157.22.75.151:22065] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bentechconstruction.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bentechconstruction.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amfbCkw_kicTxnXBdMGSmQAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 16:27:02
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.151 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 12:26:54.446290 2026] [security2:error] [pid 4239:tid 4239] [client 157.22.75.151:19841] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ezekielproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ezekielproductions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al-dzqmGLXQ29uJys9QhcgAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-17 20:33:00
(1 week ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-07-17 00:28:48
(2 weeks ago)
PARMACOM WEBEXPLOIT 157.22.75.151 (157.22.75.151)
Web App Attack
🇩🇪
netclix.gr
2026-07-15 15:13:02
(2 weeks ago)
(wordpress) Failed wordpress login from 157.22.75.151 (GB/United Kingdom/-): (CF_ENABLE)
Brute-Force
🇫🇷
Tilellit.PRO
2026-07-05 03:50:53
(3 weeks ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇫🇷
Tilellit.PRO
2026-07-02 04:31:57
(4 weeks ago)
tilellit/wp-armour-ban
Hacking
🇫🇷
Tilellit.PRO
2026-06-29 14:46:21
(1 month ago)
Fail2Ban banned 157.22.75.151 for security violations in jail wp-armour. Log: 2026/06/29 14:46:21 [e ...
show more
Fail2Ban banned 157.22.75.151 for security violations in jail wp-armour. Log: 2026/06/29 14:46:21 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.75.151 | Target: wplogin" , client: 157.22.75.151, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇸🇪
vaia.cloud
2026-06-27 19:29:01
(1 month ago)
trying wp-login.php/xmlrpc.php 65 times in 1 minutes
Brute-Force
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-27 10:22:44
(1 month ago)
Fail2Ban banned 157.22.75.151 for security violations in jail wp-armour. Log: 2026/06/27 10:22:43 [e ...
show more
Fail2Ban banned 157.22.75.151 for security violations in jail wp-armour. Log: 2026/06/27 10:22:43 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.75.151 | Target: wplogin" , client: 157.22.75.151, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇩🇪
big-cloud.nl
2026-06-23 05:12:56
(1 month ago)
Try to access /xmlrpc.php
Web App Attack
2026-05-27 08:47:47
(2 months ago)
SQL injection, multiple attempts.
SQL Injection
🇩🇪
stinpriza
2026-03-22 20:01:57
(4 months ago)
Web App Attack
Web App Attack