🇫🇷
SpaceHost-Server
2026-04-01 22:29:21
UTC ·
(7 months ago)
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-03-18 07:59:29
UTC ·
(7 months ago)
12.954 requests from abuseipdb.com blacklisted IP (2mos4w2d)
Brute-Force
Bad Web Bot
🇺🇸
myagent.site
2026-03-18 07:46:39
UTC ·
(7 months ago)
Blocked user enumeration attempt
Hacking
🇹🇷
rtbh.com.tr
2026-03-16 20:12:05
UTC ·
(7 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷
SpaceHost-Server
2026-03-16 01:07:47
UTC ·
(7 months ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 22:15:38
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 165.22.58.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 18:15:31.609358 2026] [security2:error] [pid 25663:tid 25663] [client 165.22.58.133:58691] M ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.58.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 18:15:31.609358 2026] [security2:error] [pid 25663:tid 25663] [client 165.22.58.133:58691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arkqp.kreweofhyatt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arkqp.kreweofhyatt.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "abcvg-mlSX9EclOVLuE7lQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-03-15 22:05:35
UTC ·
(7 months ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 21:38:40
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 165.22.58.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 17:38:33.787824 2026] [security2:error] [pid 6210:tid 6226] [client 165.22.58.133:57869] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.58.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 17:38:33.787824 2026] [security2:error] [pid 6210:tid 6226] [client 165.22.58.133:57869] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arizonasolutionsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arizonasolutionsgroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "abcm2TzEKuXxSKdfOFLWUAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-03-15 21:15:00
UTC ·
(7 months ago)
IPBlock protected site ID [1365-l].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-03-15 18:56:22
UTC ·
(7 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
SG/Singapore/-
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 17:19:06
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 165.22.58.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 13:18:59.862196 2026] [security2:error] [pid 17356:tid 17356] [client 165.22.58.133:64644] M ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.58.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 13:18:59.862196 2026] [security2:error] [pid 17356:tid 17356] [client 165.22.58.133:64644] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arellasoc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arellasoc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "abbqA-TY0kuvHcjrZAHoQAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-03-15 16:49:28
UTC ·
(7 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-03-15 16:29:54
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 165.22.58.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 12:29:46.717673 2026] [security2:error] [pid 3588:tid 3588] [client 165.22.58.133:63617] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.58.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 12:29:46.717673 2026] [security2:error] [pid 3588:tid 3588] [client 165.22.58.133:63617] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ardeeapps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ardeeapps.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "abbeenvfqRZcKFvghAlqKAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-03-15 15:39:50
UTC ·
(7 months ago)
Excessive crawling HTTP 404
Web App Attack
🇳🇿
Antinson
2026-03-15 14:00:05
UTC ·
(7 months ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot