🇩🇪
DasDuo
2026-08-25 13:08:52
(1 hour ago)
Attempt on port 8081 - potential web application attack attempt. Blocked by firewall (unsolicited in ...
show more
Attempt on port 8081 - potential web application attack attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
show less
Port Scan
2026-08-25 12:39:49
(2 hours ago)
denied traffic to a non-approved destination port. destination port 6606.
Port Scan
🇺🇸
xmission.com
2026-08-25 12:23:45
(2 hours ago)
Blocked by UFW (TCP on 9000)
Source port: 61007
TTL: 241
Packet length: 44
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 9000)
Source port: 61007
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 167.99.122.56) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇷
SpaceHost-Server
2026-06-02 22:29:41
(2 months ago)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-02 10:06:40
(2 months ago)
Xmlrpc Caught (7)
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-06-02 04:13:41
(2 months ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇩🇪
big-cloud.nl
2026-06-01 23:13:14
(2 months ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-01 22:29:13
(2 months ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 14:12:54
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 167.99.122.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.122.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 10:12:50.516503 2026] [security2:error] [pid 28184:tid 28184] [client 167.99.122.56:50659] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotelkona.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotelkona.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah2TYiATTOeViWtAaN3EmAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-01 14:12:54
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
WeekendWeb
2026-06-01 14:10:31
(2 months ago)
Wordpress Vunerability attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 11:28:43
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 167.99.122.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.122.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 07:28:36.679781 2026] [security2:error] [pid 22145:tid 22145] [client 167.99.122.56:53215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.method1.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.method1.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah1s5Epj3gx__s-9sDZurQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 09:36:49
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 167.99.122.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.122.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 05:36:44.641348 2026] [security2:error] [pid 23950:tid 23950] [client 167.99.122.56:51727] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nationalenq.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nationalenq.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah1SrEM_fV6IX8sq_31lGwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-01 07:41:19
(2 months ago)
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=20
Hacking
🇺🇸
TPI-Abuse
2026-06-01 01:27:17
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 167.99.122.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.122.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 21:27:11.639806 2026] [security2:error] [pid 16342:tid 16342] [client 167.99.122.56:63516] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rodandreelpiercam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodandreelpiercam.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahzf722OuGy9t35pkXXNlgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack