🇩🇪
LRob.fr
2026-06-25 04:15:05
(19 hours ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-06-24 20:44:03
(1 day ago)
Wordfence waf block on 1105merrystreet
Web App Attack
🇷🇴
INTEQ
2026-06-24 19:53:45
(1 day ago)
Web attack from 177.136.229.21
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 09:09:32
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 05:09:25.822610 2026] [security2:error] [pid 11832:tid 11832] [client 177.136.229.21:38612] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fritsknuf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fritsknuf.com"] [uri "/blog/wp-json/wp/v2/users"] [unique_id "ajpNRecbF5Ubfnn9q9xtVwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 05:27:11
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 01:27:05.047976 2026] [security2:error] [pid 19063:tid 19063] [client 177.136.229.21:36812] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jesussotoca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jesussotoca.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajoZKRYfapmyv6MOouNWJAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-22 22:28:31
(3 days ago)
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-06-22 19:15:03
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 16:37:47
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 12:37:44.128312 2026] [security2:error] [pid 11379:tid 11379] [client 177.136.229.21:44778] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cajunpicasso.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cajunpicasso.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajlk2Pegu1WtDGxhFIw2NwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 14:22:22
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 10:22:15.615641 2026] [security2:error] [pid 1234:tid 1234] [client 177.136.229.21:60070] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vzan.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vzan.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajlFFwk7XbRz2maE9SDSwgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 12:16:40
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 08:16:33.239392 2026] [security2:error] [pid 9825:tid 9851] [client 177.136.229.21:34442] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.scottspencergfx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.scottspencergfx.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajknoZF5Ecgmng7FRD9yMwAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 01:37:15
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 21:37:10.767665 2026] [security2:error] [pid 6945:tid 6945] [client 177.136.229.21:50856] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.haverhillhouse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.haverhillhouse.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajiRxjvb_AtkFFuOzLt0BAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Dolphi
2026-06-21 21:20:02
(4 days ago)
Excessive POST /wp-login.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 21:16:31
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 177.136.229.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 17:16:27.143192 2026] [security2:error] [pid 30130:tid 30130] [client 177.136.229.21:49912] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wwfstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wwfstudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajhUq6MHOWigmI8hmOR8RQAAAG8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Pingger Shikkoken
2023-11-16 02:08:13
(2 years ago)
Participating in DDoS Amplification Attack! Sending 11 requests over 34250s asking for ?0? of apple. ...
show more
Participating in DDoS Amplification Attack! Sending 11 requests over 34250s asking for ?0? of apple.com, atlassian.com, cisco.com
show less
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host