🇺🇸
TPI-Abuse
2026-10-15 13:56:28
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:56:24.210037 2026] [security2:error] [pid 27980:tid 27980] [client 174.242.249.64:7871] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fundaciondamashcc.org.ec|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fundaciondamashcc.org.ec"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atDbiGffXUHTszrVCSgSGwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:08:38
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:08:34.531780 2026] [security2:error] [pid 1332:tid 1351] [client 174.242.249.64:6385] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelrandon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelrandon.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atDCQmuLALSxK1v3p5xryQAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 04:35:47
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:35:41.165311 2026] [security2:error] [pid 22517:tid 22517] [client 174.242.249.64:8177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||renjunews.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "renjunews.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atBYHcFQdgDtQcNOY51VcAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-10-15 03:47:28
(1 day ago)
Repeated request on blocked xmlrpc.php.
174.242.249.64 - - [15/Oct/2026:05:47:26 +0200] "POST /xmlrp ...
show more
Repeated request on blocked xmlrpc.php.
174.242.249.64 - - [15/Oct/2026:05:47:26 +0200] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Go-http-client/2.0"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 00:32:37
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:32:32.131905 2026] [security2:error] [pid 4299:tid 4299] [client 174.242.249.64:6397] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||5starfluffandfold.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "5starfluffandfold.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atAfIPkoGg5zCZ068F1aaQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 20:55:36
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:55:32.465664 2026] [security2:error] [pid 27925:tid 27925] [client 174.242.249.64:7750] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bouldercorporate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bouldercorporate.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as_sRExk9bmo_efbE3vPIwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 19:13:53
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:13:47.815495 2026] [security2:error] [pid 7879:tid 7879] [client 174.242.249.64:5935] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||businessvaluationapp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "businessvaluationapp.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as_Ua4YGlzlDIq5lxBRPvwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
[email protected]
2026-10-14 09:45:28
(1 day ago)
2026-10-14 11:45:27,727 fail2ban.actions [913722]: NOTICE [apache-scanner] Ban 174.242.249.6 ...
show more
2026-10-14 11:45:27,727 fail2ban.actions [913722]: NOTICE [apache-scanner] Ban 174.242.249.642026-10-14 11:45:28,116 fail2ban.actions [913722]: NOTICE [wordpress] Ban 174.242.249.64
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-10-14 08:30:17
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 04:30:12.263620 2026] [security2:error] [pid 543:tid 543] [client 174.242.249.64:5926] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||804web.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "804web.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as89lEDx-tfn7icFPxRMiwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 05:11:03
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:10:56.040981 2026] [security2:error] [pid 14269:tid 14269] [client 174.242.249.64:5939] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.evolute.io|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.evolute.io"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as8O4EmMmqLcGqMKl6O3_wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-14 00:59:09
(2 days ago)
Web exploit attempt | method: POST, GET | path: /xmlrpc.php, /wp-login.php | ua: Go-http-client/2.0, ...
show more
Web exploit attempt | method: POST, GET | path: /xmlrpc.php, /wp-login.php | ua: Go-http-client/2.0, Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:44:02
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:43:55.645661 2026] [security2:error] [pid 31044:tid 31044] [client 174.242.249.64:5928] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cleaningmedical.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cleaningmedical.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as7COxUXnhd0QWNnK1gRAQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-10-13 22:29:45
(2 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 21:40:54
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.242.249.64 (64.sub-174-242-249.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:40:50.285155 2026] [security2:error] [pid 15669:tid 15669] [client 174.242.249.64:5921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iberhome.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iberhome.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as6lYl9B1gkG0TCcqnMySwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
