🇺🇸
TPI-Abuse
2026-06-03 13:59:01
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:58:56.395892 2026] [security2:error] [pid 26060:tid 26060] [client 166.1.131.184:54943] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||insidepublications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "insidepublications.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiAzIPBr1SJdvAsv279SawAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
rdpguard.com
2026-06-02 18:52:49
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇬🇧
consul.to
2026-05-24 19:40:32
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 16:10:45
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 12:10:40.207988 2026] [security2:error] [pid 8075:tid 8075] [client 166.1.131.184:60649] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||portraitsinblues.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "portraitsinblues.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag8ugMjMYAGiqvDiWgPXuAAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-21 12:08:47
(1 week ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-20 22:34:33
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 18:34:27.857679 2026] [security2:error] [pid 21142:tid 21142] [client 166.1.131.184:32901] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ibcountn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ibcountn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag4282HJz4wTlrrfzutJmAAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 22:37:24
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 17:37:13.271222 2026] [security2:error] [pid 32681:tid 32681] [client 166.1.131.184:44131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||method1.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "method1.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aXKmmaSQu20vxF2eR9enbAAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 17:00:59
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 12:00:51.635171 2026] [security2:error] [pid 21057:tid 21060] [client 166.1.131.184:49173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grupojdg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grupojdg.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXJXw3foiYnEcrae1v1kwwAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 15:13:03
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 10:12:57.939469 2026] [security2:error] [pid 16795:tid 16795] [client 166.1.131.184:13845] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||desertalfas.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desertalfas.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXI-eZEBvVZvjrg-MLX35AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:50
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇩🇪
conseilgouz
2025-05-09 13:29:41
(1 year ago)
vee-13 : Block SQL injections=>/component/weblinks/?task=weblink.go&catid=15%3aannonces&id=4 ...
show more
vee-13 : Block SQL injections=>/component/weblinks/?task=weblink.go&catid=15%3aannonces&id=45%3aclassic-number%24%24+AND+%2...( AND)
show less
Hacking
🇫🇷
Tonga-Soa
2025-05-07 18:29:43
(1 year ago)
"Inject SQL SELECT ... information_schema..."
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2025-02-09 10:13:00
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 166.1.131.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 09 05:12:51.661231 2025] [security2:error] [pid 19291:tid 19291] [client 166.1.131.184:41527] [client 166.1.131.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allucanfeet.postermodelsworldwideinc.com"] [uri "/.env"] [unique_id "Z6h_oz3yU_1jieQY6MfDfwAAAAc"], referer: https://a00041.tiiny.site/
show less
Brute-Force
Bad Web Bot
Web App Attack