🇺🇸
mnsf
2026-10-24 09:06:08
(3 hours ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 07:14:35
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:14:32.453476 2026] [security2:error] [pid 22473:tid 22487] [client 160.19.36.37:57452] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eceinal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eceinal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atxa2Ihxhte_5bDb3t72YQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-23 04:22:18
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 08:46:39
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 04:46:30.944816 2026] [security2:error] [pid 30892:tid 31012] [client 160.19.36.37:39162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||justaposephotography.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "justaposephotography.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ath75g8f0dUeIjdGQNT1WwAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 14:42:23
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:42:20.350485 2026] [security2:error] [pid 25233:tid 25233] [client 160.19.36.37:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||english.cloudex.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "english.cloudex.click"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atYsTGviBC9rAoXtlaL4LgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-10-15 00:10:09
(1 week ago)
Web exploit attempt | method: GET | path: /wp-json/wp/v2/users | ua: Mozilla/5.0 (Windows NT 10.0; W ...
show more
Web exploit attempt | method: GET | path: /wp-json/wp/v2/users | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 21:27:19
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 17:27:15.563613 2026] [security2:error] [pid 934:tid 934] [client 160.19.36.37:59706] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||verdeprofundo.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "verdeprofundo.net"] [uri "/wp-json/wp/v2/users"] [unique_id "as_zs0U6E1QxwJboRUStywAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:37:33
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:37:21.318346 2026] [security2:error] [pid 20468:tid 20468] [client 160.19.36.37:40108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||prcomputersolutions.com.anthonyanimalclinic.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prcomputersolutions.com.anthonyanimalclinic.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as8jIW0t2UEvMLQxFSFuvQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-13 12:17:34
(1 week ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 160.19.36.37 (ZA/South Africa/-): 1 in the la ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 160.19.36.37 (ZA/South Africa/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇩🇪
Packets-Decreaser.NET
2026-10-11 01:16:23
(1 week ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇫🇷
dynamix
2026-10-10 07:02:42
(2 weeks ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 17:30:49
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 160.19.36.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 13:30:30.165368 2026] [security2:error] [pid 5724:tid 5724] [client 160.19.36.37:54524] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||echinech.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "echinech.com"] [uri "/prod/prod.sql"] [unique_id "askktlZ_MZctT8MdpP3c8gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-02 08:06:15
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇨🇿
lp
2026-10-01 06:24:00
(3 weeks ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 160.19.36.37
2026-10-01T07:32:08+02:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 160.19.36.37
2026-10-01T07:32:08+02:00 vpn Access-Reject 'xlopsm03' station: 160.19.36.37 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-09-27 16:30:48
(3 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[0]=52 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[0]=52&topics[1]=38&topics[2]=34&topics[3]=63 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
