🇺🇸
TPI-Abuse
2026-11-08 09:25:20
UTC ·
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:25:13.313374 2026] [security2:error] [pid 23773:tid 23773] [client 165.22.111.0:62193] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:25:13.313374 2026] [security2:error] [pid 23773:tid 23773] [client 165.22.111.0:62193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.transcapitalsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.transcapitalsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avA_-cx67-DK7HuLMcxUBwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-08 06:49:19
UTC ·
(6 hours ago)
10 attempts against mh-misc-ban on pf221114
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:01:30
UTC ·
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:01:22.541308 2026] [security2:error] [pid 30817:tid 30817] [client 165.22.111.0:53720] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:01:22.541308 2026] [security2:error] [pid 30817:tid 30817] [client 165.22.111.0:53720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||annropp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "annropp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au_J4hkxhBvmlu6sCctpKgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 16:06:00
UTC ·
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:05:57.143850 2026] [security2:error] [pid 27777:tid 27777] [client 165.22.111.0:54704] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:05:57.143850 2026] [security2:error] [pid 27777:tid 27777] [client 165.22.111.0:54704] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.crep-psych.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crep-psych.org"] [uri "/wp-json/wp/v2/users"] [unique_id "au9MZdgs2WhM_OHVFDGSoAAAAA8"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:39:15
UTC ·
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:39:10.233843 2026] [security2:error] [pid 19958:tid 19958] [client 165.22.111.0:62432] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:39:10.233843 2026] [security2:error] [pid 19958:tid 19958] [client 165.22.111.0:62432] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dandwsrq.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dandwsrq.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au9GHjR4iZ68qdWV4pq75gAAAAE"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:15:29
UTC ·
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:15:23.485674 2026] [security2:error] [pid 16384:tid 16384] [client 165.22.111.0:57294] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:15:23.485674 2026] [security2:error] [pid 16384:tid 16384] [client 165.22.111.0:57294] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.flatchestedmama.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.flatchestedmama.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au9Ai4ZluBxmmIZV2Xm-vQAAAAw"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 13:58:59
UTC ·
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 08:58:51.452089 2026] [security2:error] [pid 14191:tid 14191] [client 165.22.111.0:60745] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 08:58:51.452089 2026] [security2:error] [pid 14191:tid 14191] [client 165.22.111.0:60745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pcga.golf|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pcga.golf"] [uri "/wp-json/wp/v2/users"] [unique_id "au8um4Bh7Fi5xBHJ_FmZPgAAAAA"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 13:43:39
UTC ·
(23 hours ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 08:43:32.370657 2026] [security2:error] [pid 3125:tid 3125] [client 165.22.111.0:65498] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 08:43:32.370657 2026] [security2:error] [pid 3125:tid 3125] [client 165.22.111.0:65498] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.travelwithjenniferb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.travelwithjenniferb.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au8rBG3yVyZf6j5W1irtkQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 11:46:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 06:46:52.018474 2026] [security2:error] [pid 16161:tid 16161] [client 165.22.111.0:51247] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 06:46:52.018474 2026] [security2:error] [pid 16161:tid 16161] [client 165.22.111.0:51247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.doreenkimura.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.doreenkimura.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au8PrKTgqX1mlalYhTSRlQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dtorrer
2026-11-07 07:30:19
UTC ·
(1 day ago)
Brute-force general attack.
Brute-Force
🇺🇸
dot.mg
2026-11-07 03:24:02
UTC ·
(1 day ago)
Bad behaviour
Web Spam
2026-11-07 03:19:02
UTC ·
(1 day ago)
Bot / scanning and/or hacking attempts: GET /wp-admin/index.php HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Fyugofuturism.eu%2Fw, POST /wp-login.php HTTP/1.1
Hacking
Web App Attack
🇲🇾
Rizzy
2026-11-06 23:25:31
UTC ·
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
middelkoopcc
2026-11-06 20:21:01
UTC ·
(1 day ago)
2026-11-06 21:18:18 WordPress login error from 165.22.111.0: invalid_username && 2026-11-06 21:18:22 WordPress login error from 165.22.111.0: invalid_username && 2026-11-06 21:18:26 WordPress login error from 165.22.111.0: invalid_username && 21 more ...
show more
2026-11-06 21:18:18 WordPress login error from 165.22.111.0: invalid_username && 2026-11-06 21:18:22 WordPress login error from 165.22.111.0: invalid_username && 2026-11-06 21:18:26 WordPress login error from 165.22.111.0: invalid_username && 21 more within 20 minutes
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 02:27:02
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:26:57.229737 2026] [security2:error] [pid 9327:tid 9327] [client 165.22.111.0:57738] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.111.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:26:57.229737 2026] [security2:error] [pid 9327:tid 9327] [client 165.22.111.0:57738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||phalanxemail.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "phalanxemail.net"] [uri "/wp-json/wp/v2/users"] [unique_id "au068aVb8FOgdhaAYE810gAAAAU"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
