🇺🇸
TPI-Abuse
2026-10-15 09:47:03
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 161.142.142.87 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 161.142.142.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:46:55.628852 2026] [security2:error] [pid 4407:tid 4407] [client 161.142.142.87:3758] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||celebritybikinigossip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "celebritybikinigossip.com"] [uri "/wp-includes/wp-json/wp/v2/users/me"] [unique_id "atChDz042_dfieF97ooj7gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 01:40:29
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 161.142.142.87 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 161.142.142.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:40:22.820615 2026] [security2:error] [pid 14852:tid 14852] [client 161.142.142.87:3749] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wholesalelivelobsters.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wholesalelivelobsters.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atAvBgTs1m92oiX7Hu6V5gAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:57:42
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 161.142.142.87 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 161.142.142.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:57:37.247800 2026] [security2:error] [pid 3164:tid 3164] [client 161.142.142.87:3957] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rame-int.marklex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rame-int.marklex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as9gIdVI2JVhcR-3ibH2cgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-14 04:22:19
(2 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 06:09:11
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 161.142.142.87 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 161.142.142.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 02:09:04.868596 2026] [security2:error] [pid 27330:tid 27330] [client 161.142.142.87:3751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cm-salon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cm-salon.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as3LAIKCimP6ei9QizOGigAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2026-10-12 15:23:52
(4 days ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇮🇹
CoreTech srl
2026-10-12 15:22:35
(4 days ago)
cloudlinux2 fail2ban: 2026-10-12 14:24:08,668 fail2ban.filter [1878]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-12 14:24:08,668 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 182.10.137.242 - 2026-10-12 14:24:08cloudlinux2 fail2ban: 2026-10-12 14:24:11,901 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 210.195.136.94 - 2026-10-12 14:24:11cloudlinux2 fail2ban: 2026-10-12 14:24:16,727 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 161.142.142.87 - 2026-10-12 14:24:16cloudlinux2 fail2ban: 2026-10-12 14:24:30,734 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 87.115.33.226 - 2026-10-12 14:24:30cloudlinux2 fail2ban: 2026-10-12 14:25:01,025 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 8.210.59.99 - 2026-10-12 14:25:00cloudlinux2 fail2ban: 2026-10-12 14:25:15,757 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 92.205.211.35 - 2026-10-12 14:25:15cloudlinux2 fail2ban: 2026-10-12 14:25:11,920 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 46.201.78.210 - 2026-10-12 14:25:
show less
Web App Attack
🇩🇪
Packets-Decreaser.NET
2026-10-11 01:56:23
(5 days ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇩🇪
LRob
2026-10-09 11:03:11
(1 week ago)
Not following 301 redirects — wasted requests | method: GET | path: /en/product/aperio-h100-gauche-3 ...
show more
Not following 301 redirects — wasted requests | method: GET | path: /en/product/aperio-h100-gauche-3 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36
show less
Bad Web Bot
2026-07-14 22:30:28
(3 months ago)
Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ...
show more
Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /wishlist/index/add/product/7352/form_key/XxG6XMUjEU1kZFT1/ | UA: Mozilla/5.0 (compatible; MSIE 8.0; Windows CE; Trident/5.1) | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack