🇺🇸
nationaleventpros.com
2026-06-14 23:04:39
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-13 21:36:40
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.240.230 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.240.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:36:36.297165 2026] [security2:error] [pid 23748:tid 23748] [client 170.168.240.230:29839] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stormwlf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stormwlf.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3NZFHJMWhKAy2kLe-sewAAACE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-06-11 19:25:59
(2 months ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 22:06:11
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.240.230 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.240.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 18:06:06.997702 2026] [security2:error] [pid 19634:tid 19634] [client 170.168.240.230:40939] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||threewillowsfarm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "threewillowsfarm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aguNTv9synTyRvb4UAwNegAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 19:18:53
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.240.230 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.240.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 15:18:45.775761 2026] [security2:error] [pid 18348:tid 18348] [client 170.168.240.230:12049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||shirtzz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "shirtzz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af43FQIVDMPbONOuLuXHFgAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 01:56:01
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.240.230 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.240.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 21:55:56.190218 2026] [security2:error] [pid 3531259:tid 3531259] [client 170.168.240.230:39271] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bacona.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bacona.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adcHLM_hbFUmMI-romEfYgAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-04-07 17:29:12
(4 months ago)
[TueApr0719:29:07.5657342026][security2:error][pid1239950:tid1240064][client170.168.240.230:0]ModSec ...
show more
[TueApr0719:29:07.5657342026][security2:error][pid1239950:tid1240064][client170.168.240.230:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"112\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"lacer.ch\"][uri\"/xmlrpc.php\"][unique_id\"adU-43Bt2jAmII9EFkl4dwAAAUY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
HandyTreff.de
2026-04-03 01:56:19
(4 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.286 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.286 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.3
show less
Web App Attack
Bad Web Bot
🇩🇪
CommanderRoot
2025-10-24 10:33:43
(9 months ago)
Bot crawler
DDoS Attack
Web Spam