🇦🇺
afleventoffice.com.au
2026-01-09 22:16:31
(4 months ago)
GET /wp-json/wp/v2/users HTTP/1.1
Web App Attack
🇺🇸
TPI-Abuse
2025-11-06 12:45:45
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 173.211.69.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 173.211.69.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 07:45:39.310423 2025] [security2:error] [pid 32554:tid 32554] [client 173.211.69.54:57169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dynamic-therapy-mn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dynamic-therapy-mn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQyYc6tB7isSCm62AyfH6AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 09:01:20
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 173.211.69.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 173.211.69.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 05:01:12.451565 2025] [security2:error] [pid 17660:tid 17660] [client 173.211.69.54:49107] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||register-yacht-france.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "register-yacht-france.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQCGWA7yW1olp-D_4uYQ_QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-28 06:44:07
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 173.211.69.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 173.211.69.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 28 02:43:51.094045 2025] [security2:error] [pid 20304:tid 20304] [client 173.211.69.54:35723] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cook-islands-boat-registration.com.boatregistrationdelaware.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cook-islands-boat-registration.com.boatregistrationdelaware.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aK_6p-Kx2xyD3Pd1VjMKwgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
PulseServers
2025-07-08 08:59:39
(10 months ago)
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ...
show more
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1
...
show less
DDoS Attack
Exploited Host
🇺🇸
PulseServers
2025-06-15 08:45:33
(11 months ago)
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ...
show more
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1
...
show less
DDoS Attack
Exploited Host
🇺🇸
TPI-Abuse
2025-06-07 10:40:51
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 173.211.69.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 173.211.69.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 07 06:40:42.598875 2025] [security2:error] [pid 1571578:tid 1571578] [client 173.211.69.54:59403] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||med-engineering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "med-engineering.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aEQXKouk1uSi_P_ERe9YQgAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2025-05-28 08:20:00
(1 year ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack