๐บ๐ธ
TPI-Abuse
2026-10-21 18:06:44
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 14:06:37.587345 2026] [security2:error] [pid 30707:tid 30707] [client 169.224.126.179:8820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tasteshop.l3l4.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tasteshop.l3l4.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atj_LRpiheY1LKalJ4OjwAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 10:11:22
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:11:14.984877 2026] [security2:error] [pid 16583:tid 16583] [client 169.224.126.179:8956] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||epetsure.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "epetsure.co"] [uri "/wp-json/wp/v2/users"] [unique_id "atiPwr4sL25YZ9MZoN0pvAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 12:21:05
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 08:21:00.720970 2026] [security2:error] [pid 5485:tid 5485] [client 169.224.126.179:8800] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bostonmarathonstories.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bostonmarathonstories.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNoLInl1gt6RLfWxuWgnQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 18:11:21
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 14:11:16.495487 2026] [security2:error] [pid 17629:tid 17640] [client 169.224.126.179:8953] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||annacaird.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "annacaird.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJoxP9OOkzR3eeMkTbT7gAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-16 15:32:16
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 14:18:53
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 169.224.126.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 10:18:46.044183 2026] [security2:error] [pid 30820:tid 30820] [client 169.224.126.179:8876] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||clipper1970.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "clipper1970.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as49xgFdB96nYuPHTkeYNAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-10 13:39:39
(2 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ซ๐ท
Sklurk
2026-09-20 01:33:15
(1 month ago)
Web App Attack
Web App Attack
Anonymous
2026-08-18 11:47:47
(2 months ago)
Distributed scraper residential proxy pool โ www.publicprinceton.com /store/filtered/ (WineCommerce ...
show more
Distributed scraper residential proxy pool โ www.publicprinceton.com /store/filtered/ (WineCommerce WAF)
show less
DDoS Attack
Bad Web Bot
Exploited Host
๐บ๐ธ
kosada.com
2026-08-11 07:55:52
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ฉ๐ช
LRob
2026-08-03 13:47:10
(2 months ago)
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ...
show more
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/cat_ids~144,187/tag_ids~436,476,607,717,580/request_format~json/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
DDoS Attack
Web App Attack
๐จ๐ญ
backslash
2026-07-16 03:36:00
(3 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
๐บ๐ธ
RAP
2026-05-03 23:28:44
(5 months ago)
2026-05-03 23:28:44 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
2026-02-13 06:14:23
(8 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐จ๐ญ
backslash
2026-01-13 14:25:08
(9 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot