🇺🇸
TPI-Abuse
2026-06-11 19:25:52
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 185.61.221.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.61.221.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 15:25:45.944452 2026] [security2:error] [pid 2209:tid 2209] [client 185.61.221.176:65359] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||siczewicz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "siczewicz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aisLuTJfID3kDN69lqZh1wAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 06:19:19
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 185.61.221.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.61.221.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:19:14.934671 2026] [security2:error] [pid 18690:tid 18690] [client 185.61.221.176:64991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tekbit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tekbit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aipTYuUI5VOCfFOochuO3gAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-09 22:36:00
(6 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-24 23:44:31
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.61.221.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.61.221.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 19:44:24.774330 2026] [security2:error] [pid 15099:tid 15099] [client 185.61.221.176:28141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fwa51.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fwa51.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahONWKzFBeYIq6fSTUDLlgAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 15:38:00
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 185.61.221.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.61.221.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 11:37:53.894785 2026] [security2:error] [pid 3622:tid 3622] [client 185.61.221.176:31957] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cormanleigh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cormanleigh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agCmUab3EbJAsMPQUn7z5AAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-04-02 23:33:04
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-04-01 21:57:50
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-31 18:11:25
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-30 15:02:35
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-28 14:49:16
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-27 11:46:58
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-24 04:12:09
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-22 17:58:20
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-21 11:17:59
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-20 05:41:57
(2 months ago)
Web App Attack
Web App Attack