🇺🇸
TPI-Abuse
2026-06-20 13:52:04
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 09:51:58.120236 2026] [security2:error] [pid 24968:tid 24968] [client 170.168.241.223:47253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||schmitzcomm.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "schmitzcomm.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajaa_jUfndLom8dAkZQuMQAAAB8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 14:29:00
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 10:28:53.467785 2026] [security2:error] [pid 18807:tid 18832] [client 170.168.241.223:33949] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.transitionalcareservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.transitionalcareservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahBoJcWbLmRLq44IDWnT8QAAAFU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
S.O.B.A. Dev.
2026-05-16 17:43:36
(1 month ago)
Threat Blocked by BeeHive from (ASN:59651) (Network:AS QualityNetwork) (Host:soba.dev) (Method:GET) ...
show more
Threat Blocked by BeeHive from (ASN:59651) (Network:AS QualityNetwork) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2026-05-16T17:43:36Z)
show less
Brute-Force
Web Spam
Web App Attack
🇨🇭
4server
2026-05-08 06:29:58
(1 month ago)
[FriMay0808:29:50.9998562026][security2:error][pid185883:tid186117][client170.168.241.223:0]ModSecur ...
show more
[FriMay0808:29:50.9998562026][security2:error][pid185883:tid186117][client170.168.241.223:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"motogiro.com\"][uri\"/xmlrpc.php\"][unique_id\"af2C3sXz3JiVkGzzsGXWxgAAAMU\"]
show less
Hacking
Web App Attack
🇩🇪
stinpriza
2026-04-25 02:02:21
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-04-10 23:48:57
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 19:48:50.286261 2026] [security2:error] [pid 2930126:tid 2930126] [client 170.168.241.223:16285] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||azbrooks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "azbrooks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "admMYuacIzzkXJupP9ul8wAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-04-10 18:06:11
(2 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 05:49:02
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 01:48:57.435549 2026] [security2:error] [pid 128497:tid 128497] [client 170.168.241.223:13217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adc9ySnn3YczZj55oh6StAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-28 20:11:49
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 16:11:44.677004 2026] [security2:error] [pid 7464:tid 7488] [client 170.168.241.223:48839] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gtci.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gtci.us"] [uri "/wp-json/wp/v2/users"] [unique_id "acg2AEABWY1vlbn0neC98QAAAVQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TRoden
2026-03-24 10:03:13
(2 months ago)
Geo Block Plugin: Escalation flag(s): rce_attempt
Hacking
🇺🇸
TPI-Abuse
2026-03-20 00:50:10
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:49:26.290506 2026] [security2:error] [pid 28099:tid 28099] [client 170.168.241.223:25261] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kellenbarger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kellenbarger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abyZlnL_HT9xTfOdD3IwVwAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 00:02:31
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 19:02:18.928683 2026] [security2:error] [pid 15697:tid 15707] [client 170.168.241.223:46633] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||heworeblack.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heworeblack.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXK6itZI1H3GjwhLB1RJMAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-01-22 23:30:25
(4 months ago)
Wordpress attack: user enumeration attempt detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 21:42:18
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.241.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 16:42:14.881518 2026] [security2:error] [pid 2587:tid 2587] [client 170.168.241.223:48661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||walterceron.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "walterceron.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXKZtsGo99wUeJkAT75M4QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack