🇺🇸
TPI-Abuse
2026-11-10 04:33:03
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:32:56.018429 2026] [security2:error] [pid 22429:tid 224 ...
show more
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:32:56.018429 2026] [security2:error] [pid 22429:tid 22429] [client 176.38.153.160:60966] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bfpsamoa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bfpsamoa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avKeeMUrxO-g5XKrmFPzmAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 10:30:12
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:30:05.482702 2026] [security2:error] [pid 15459:tid 154 ...
show more
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:30:05.482702 2026] [security2:error] [pid 15459:tid 15459] [client 176.38.153.160:46940] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||decisiontrace.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "decisiontrace.org"] [uri "/wp-json/wp/v2/users"] [unique_id "au79rfJ0p_Yp-8YPa3a2CwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 23:51:45
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:51:37.150664 2026] [security2:error] [pid 2954971:tid 2 ...
show more
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:51:37.150664 2026] [security2:error] [pid 2954971:tid 2955009] [client 176.38.153.160:35844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cynosureinternetservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosureinternetservices.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au5oCdbW2CHWHdTUCeEm2QAAAsY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-31 21:33:26
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
LRob
2026-10-31 14:30:39
UTC ·
(1 week ago)
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/profilepress/v1/users | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 | 2026-10-31 14:30 UTC
Bad Web Bot
🇩🇪
FeG Deutschland
2026-10-31 14:18:45
UTC ·
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇪🇸
Mugen
2026-10-31 00:09:56
UTC ·
(1 week ago)
Unauthorized VPN login attempts
Brute-Force
🇩🇪
LRob
2026-10-30 10:27:26
UTC ·
(2 weeks ago)
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36 | 2026-10-30 10:27 UTC
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-10-30 03:39:26
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
🇺🇸
HJ5Ss4Ju
2026-10-27 18:18:02
UTC ·
(2 weeks ago)
Wordfence firewall block
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 11:59:37
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:59:31.141901 2026] [security2:error] [pid 23092:tid 230 ...
show more
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:59:31.141901 2026] [security2:error] [pid 23092:tid 23092] [client 176.38.153.160:43190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stalbansparish.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stalbansparish.org"] [uri "/wp-json/wp/v2/users"] [unique_id "at9Ao4sX7vnkAndfe4JJOAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-26 05:23:32
UTC ·
(2 weeks ago)
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ...
show more
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 | 2026-10-26 05:23 UTC
show less
Brute-Force
Web App Attack
🇺🇸
HJ5Ss4Ju
2026-10-25 06:17:31
UTC ·
(2 weeks ago)
Wordfence firewall block
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 15:10:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:09:54.419691 2026] [security2:error] [pid 8843:tid 8843 ...
show more
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:09:54.419691 2026] [security2:error] [pid 8843:tid 8843] [client 176.38.153.160:48738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||uccryakima.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "uccryakima.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atzKQvV6JGgYa_-wfrwoBwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 13:58:44
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 09:58:39.292294 2026] [security2:error] [pid 9272:tid 9290 ...
show more
(mod_security) mod_security (id:225170) triggered by 176.38.153.160 (host-176-38-153-160.b026.la.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 09:58:39.292294 2026] [security2:error] [pid 9272:tid 9290] [client 176.38.153.160:48008] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgementz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgementz.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aty5jyVkietl5R_kWRYDjgAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
