🇺🇸
TPI-Abuse
2026-07-14 04:30:04
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 170.246.249.2 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 170.246.249.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 00:29:58.096375 2026] [security2:error] [pid 12757:tid 12757] [client 170.246.249.2:10788] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||medusakenya.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "medusakenya.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alW7RmTriaISMMRIGvckqgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 02:38:08
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 170.246.249.2 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 170.246.249.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 22:38:01.044982 2026] [security2:error] [pid 21243:tid 21243] [client 170.246.249.2:9113] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||joeordie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "joeordie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alWhCZ90Yc-M3d2bTrLr1AAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-13 08:41:56
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇦
polycoda
2026-07-13 06:18:16
(1 day ago)
AutoBlock: 🔐 WordPress Login Brute Force (40X) (Non Decay-Based)
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-07-12 20:39:28
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
lostswordfish.com
2026-07-12 12:10:07
(2 days ago)
Wordfence waf block on pameganslaw
Web App Attack
🇩🇪
ghostwarriors
2026-07-12 04:20:11
(2 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-07-12 04:03:18
(2 days ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇨🇿
ddw
2026-07-12 01:51:29
(2 days ago)
WordPress XMLRPC.PHP Access Attempt.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 21:23:25
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 170.246.249.2 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 170.246.249.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 17:23:17.684630 2026] [security2:error] [pid 11511:tid 11511] [client 170.246.249.2:10529] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brainstormer.soy|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brainstormer.soy"] [uri "/wp-json/wp/v2/users"] [unique_id "alK0Rdky7uSdKTebUDiBVwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-07-11 21:21:56
(3 days ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 16:55:46
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 170.246.249.2 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 170.246.249.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 12:55:42.903245 2026] [security2:error] [pid 10528:tid 10528] [client 170.246.249.2:11133] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||varnadorefamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "varnadorefamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alJ1jnFrpYzIUadoBKoHuwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack