🇺🇸
TPI-Abuse
2026-08-28 19:58:10
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:58:04.039847 2026] [security2:error] [pid 25032:tid 25049] [client 157.22.75.214:11741] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dulemba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dulemba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apHoTMfICwt5t4Q3EDQR-AAAAIw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 13:02:23
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:02:17.607193 2026] [security2:error] [pid 14353:tid 14353] [client 157.22.75.214:55757] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stormwlf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stormwlf.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apGG2XhulLVfnaBMeEvvaQAAADA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 03:36:19
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 23:36:14.816501 2026] [security2:error] [pid 25433:tid 25433] [client 157.22.75.214:47751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bendersite.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bendersite.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao-wrirL-3GTEuuzEKX-gQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-18 20:19:33
(1 week ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-17 00:10:35
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 20:10:28.944615 2026] [security2:error] [pid 14168:tid 14168] [client 157.22.75.214:37435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hodges-web.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hodges-web.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoJRdOyevnh48jBXP8mj5AAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-05 01:15:39
(3 weeks ago)
Web password guessing
Brute-Force
🇫🇷
Tilellit.PRO
2026-07-05 04:37:39
(1 month ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇫🇷
Tilellit.PRO
2026-06-29 15:16:06
(1 month ago)
Fail2Ban banned 157.22.75.214 for security violations in jail wp-armour. Log: 2026/06/29 15:16:06 [e ...
show more
Fail2Ban banned 157.22.75.214 for security violations in jail wp-armour. Log: 2026/06/29 15:16:06 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.75.214 | Target: wplogin" , client: 157.22.75.214, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 09:03:23
(2 months ago)
Fail2Ban banned 157.22.75.214 for security violations in jail wp-armour. Log: 2026/06/27 09:03:22 [e ...
show more
Fail2Ban banned 157.22.75.214 for security violations in jail wp-armour. Log: 2026/06/27 09:03:22 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.75.214 | Target: wplogin" , client: 157.22.75.214, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-03-29 00:47:30
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 20:47:24.666464 2026] [security2:error] [pid 20883:tid 20883] [client 157.22.75.214:49789] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cpking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cpking.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ach2nAR7_rZcvAsGbxALzwAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 08:37:37
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 04:37:33.871513 2026] [security2:error] [pid 12899:tid 12899] [client 157.22.75.214:12231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ebric.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ebric.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acTwTY0ruR34m5E8y6KCIgAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 18:03:37
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 14:03:28.905970 2026] [security2:error] [pid 15324:tid 15324] [client 157.22.75.214:11989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stormwlf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stormwlf.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acLR8MtI7hbBU662p_SKrAAAABc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 11:31:28
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 07:31:24.905043 2026] [security2:error] [pid 334:tid 334] [client 157.22.75.214:15509] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||form-a-tool.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "form-a-tool.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab_TDHw8MyR7FzWmHRcu2wAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:03:09
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:03:01.546198 2026] [security2:error] [pid 29052:tid 29111] [client 157.22.75.214:35855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||orthopedica.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "orthopedica.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abyOtXKwySwQO7-5aqE1JAAAAFE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 05:51:05
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.75.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 01:51:02.051327 2026] [security2:error] [pid 17187:tid 17187] [client 157.22.75.214:29693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stewarttaylor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stewarttaylor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abZIxtzOCqxb9NYg5Ao-cgAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack