🇺🇸
TPI-Abuse
2026-06-14 01:10:39
(31 minutes ago)
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:10:36.477058 2026] [security2:error] [pid 25433:tid 25438] [client 178.128.102.23:63991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.plumeraproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.plumeraproductions.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ai3_jEXPUzX5erbVvLB6rwAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
JCB
2026-06-13 21:56:00
(3 hours ago)
/wp-includes/wlwmanifest.xml
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 18:20:29
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 14:20:21.953944 2026] [security2:error] [pid 11295:tid 11295] [client 178.128.102.23:59526] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.pixelspective.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.pixelspective.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ai2fZdv4vsAp5Bf46wjgQQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 17:55:22
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:55:15.793469 2026] [security2:error] [pid 28714:tid 28714] [client 178.128.102.23:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.pixacast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.pixacast.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ai2Zg7q6KpJn4mgOJrN3jgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 15:31:50
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:31:45.499410 2026] [security2:error] [pid 3292:tid 3292] [client 178.128.102.23:56711] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.pinebrookdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.pinebrookdesign.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ai134fYIy-A6tA6SJBHXzQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 15:07:32
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:07:24.627564 2026] [security2:error] [pid 22366:tid 22388] [client 178.128.102.23:51700] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pilargarciamanzanares.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pilargarciamanzanares.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ai1yLNL2eeOL_jRd6a-eYgAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-13 14:33:53
(11 hours ago)
Blocked by ModSec and CSF
Port Scan
🇳🇿
Antinson
2026-06-13 13:45:58
(11 hours ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot
🇧🇪
cmbplf
2026-06-13 13:04:00
(12 hours ago)
6.790 post requests in 1 hour (3d21m59s)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-13 12:55:51
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:55:46.198206 2026] [security2:error] [pid 17089:tid 17089] [client 178.128.102.23:53181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.petrovic4.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.petrovic4.com"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "ai1TUqu8yz2d78W2ML8VVAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 12:31:56
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:31:51.149472 2026] [security2:error] [pid 23854:tid 23854] [client 178.128.102.23:49396] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||persnicketyinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "persnicketyinc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ai1Ntzqqgu5DgecYVk4OnwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-06-13 12:18:00
(13 hours ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
2026-06-13 11:57:09
(13 hours ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
2026-06-13 11:57:08
(13 hours ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-13 11:47:26
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.102.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 07:47:19.977361 2026] [security2:error] [pid 7807:tid 7807] [client 178.128.102.23:54466] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.peacefulsteps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.peacefulsteps.com"] [uri "/test/wp-json/wp/v2/users/"] [unique_id "ai1DR3DGQ_M0XZG9c1TI5QAAAHw"]
show less
Brute-Force
Bad Web Bot
Web App Attack