🇺🇸
TPI-Abuse
2026-06-18 16:15:07
(46 minutes ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 12:15:02.706032 2026] [security2:error] [pid 18130:tid 18130] [client 178.128.25.186:53411] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.newcitypark.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.newcitypark.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajQZhu0twVc-wl4AhdAtrQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 14:59:25
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 10:59:21.183385 2026] [security2:error] [pid 19634:tid 19634] [client 178.128.25.186:51841] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nessmonsters.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nessmonsters.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajQHyY9vem--Jqr7DTl0TAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 14:30:22
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 10:30:16.105626 2026] [security2:error] [pid 26346:tid 26346] [client 178.128.25.186:57385] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.nekstlevel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.nekstlevel.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajQA-OrPfeOZesFPCmcddQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 12:46:17
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 08:46:12.324584 2026] [security2:error] [pid 16257:tid 16257] [client 178.128.25.186:60317] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.naturephotographyadventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.naturephotographyadventures.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "ajPolMSVwz5pzw5Jd6PO5QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 11:09:23
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 07:09:17.026059 2026] [security2:error] [pid 9674:tid 9674] [client 178.128.25.186:54024] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.naturalacu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.naturalacu.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajPR3VIS_ROGe1C2QkhBbAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 10:40:18
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 06:40:13.733617 2026] [security2:error] [pid 4452:tid 4452] [client 178.128.25.186:56282] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.nationalenq.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.nationalenq.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajPLDUkmyKeYwMFR90HfmAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 06:53:43
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 02:53:40.095871 2026] [security2:error] [pid 19015:tid 19015] [client 178.128.25.186:56640] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.naominixon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.naominixon.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajOV9JH9fGeArDoytrtCgAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2026-06-18 06:07:31
(10 hours ago)
178.128.25.186 - - [18/Jun/2026:
...
Brute-Force
🇺🇸
TPI-Abuse
2026-06-18 01:55:32
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 21:55:26.886453 2026] [security2:error] [pid 5508:tid 5508] [client 178.128.25.186:51446] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.n4fh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.n4fh.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajNQDt6j6cAT3JNlkLzonwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
myintarweb
2026-06-17 13:52:08
(1 day ago)
178.128.25.186 - mail.myintarweb.co.uk [17/Jun/2026:14:52:06 +0100] 80 "GET /postbox.jpg/wp-includes ...
show more
178.128.25.186 - mail.myintarweb.co.uk [17/Jun/2026:14:52:06 +0100] 80 "GET /postbox.jpg/wp-includes/ID3/license.txt HTTP/1.1" 301 1668 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
strefapi_com
2026-06-17 06:09:20
(1 day ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 12:31:47
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 08:31:41.227516 2026] [security2:error] [pid 6387:tid 6413] [client 178.128.25.186:65247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.munatseng.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.munatseng.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajFCLXXEUXliaiNB7sD3ZgAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 19:52:17
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 15:52:13.427112 2026] [security2:error] [pid 19871:tid 19880] [client 178.128.25.186:50548] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.mtiminis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.mtiminis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajBX7U2AoVMTuBSiV5W78wAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 06:26:47
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:26:39.529522 2026] [security2:error] [pid 21273:tid 21273] [client 178.128.25.186:58476] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mrflatpeople.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mrflatpeople.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ai-bH11T029S6DD8b0-I-gAAAGk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 04:50:10
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.25.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:50:02.837430 2026] [security2:error] [pid 25434:tid 25434] [client 178.128.25.186:50882] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.mphq.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.mphq.net"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "ai-EehJgrwnzMJa_51dldQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack