🇺🇸
TPI-Abuse
2026-06-12 12:06:52
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 186.234.80.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 186.234.80.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 08:06:45.221913 2026] [security2:error] [pid 6017:tid 6017] [client 186.234.80.141:57456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artizandecor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artizandecor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiv2Ve9bOoieA41UONcoLwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 11:44:12
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 186.234.80.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 186.234.80.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:44:06.975257 2026] [security2:error] [pid 16453:tid 16453] [client 186.234.80.141:45694] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ucommsi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ucommsi.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aivxBoC-t1QGPUy64LkgRwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-05-21 12:50:06
(3 months ago)
Wordfence waf block on registrymatters
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 12:49:37
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 186.234.80.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 186.234.80.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 08:49:33.198416 2026] [security2:error] [pid 1792:tid 1792] [client 186.234.80.141:46956] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||marklex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marklex.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ag7_XXtP96TGDm1uctMZpAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 12:31:48
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 186.234.80.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 186.234.80.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 08:31:43.711888 2026] [security2:error] [pid 11772:tid 11772] [client 186.234.80.141:52942] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||faithlines.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "faithlines.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ag77L8c_OE823CKuZS4KngAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-11-25 05:14:53
(1 year ago)
wordpress-trap
Web App Attack
🇮🇹
Progetto1
2024-11-21 15:08:03
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇪🇸
terminalserver.com.es
2024-11-20 21:38:00
(1 year ago)
web attack
Web App Attack
2024-11-01 04:14:32
(1 year ago)
wordpress-trap
Web App Attack
🇬🇧
Swiptly
2024-09-06 05:17:23
(2 years ago)
WordPress xmlrpc spam or enumeration
...
Web Spam
Bad Web Bot
Web App Attack
2024-09-06 05:15:04
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇪🇸
10dencehispahard SL
2024-04-26 01:00:55
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇦🇺
MAGIC
2023-09-13 09:04:08
(3 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
rsiddall
2023-09-13 08:04:46
(3 years ago)
186.234.80.141 - - [13/Sep/2023:04:03:42 -0400] "POST /xmlrpc.php HTTP/1.1" 403 212 "-" "Mozilla/5.0 ...
show more
186.234.80.141 - - [13/Sep/2023:04:03:42 -0400] "POST /xmlrpc.php HTTP/1.1" 403 212 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0"
186.234.80.141 - - [13/Sep/2023:04:04:46 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0"
...
show less
Brute-Force
🇸🇪
mr_whitehat
2023-08-13 23:37:28
(3 years ago)
Probed for vulnerable web application: request line: /wp-login.php (Possible exploit:Vulnerable Word ...
show more
Probed for vulnerable web application: request line: /wp-login.php (Possible exploit:Vulnerable WordPress PHP files)
show less
Web App Attack