🇫🇮
YF
2026-11-06 11:30:51
UTC ·
(1 hour ago)
WordPress author enumeration
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 11:14:04
UTC ·
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 187.144.121.89 (dsl-89-121-144-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:13:56.761234 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:225170) triggered by 187.144.121.89 (dsl-89-121-144-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:13:56.761234 2026] [security2:error] [pid 23949:tid 23949] [client 187.144.121.89:47968] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ismaelcavazos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ismaelcavazos.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au22dLSYd7y_O6yNzmwIhgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 08:35:52
UTC ·
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 187.144.121.89 (dsl-89-121-144-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:35:48.152846 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:225170) triggered by 187.144.121.89 (dsl-89-121-144-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:35:48.152846 2026] [security2:error] [pid 3526:tid 3526] [client 187.144.121.89:44377] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theseoscribe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theseoscribe.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au2RZK61XvZ98o7_k5Kj8AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-05 01:10:01
UTC ·
(1 day ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
nationaleventpros.com
2026-11-04 18:05:56
UTC ·
(1 day ago)
WordPress login attempt
Brute-Force
2026-11-04 17:45:04
UTC ·
(1 day ago)
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, [3/3] done
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 15:04:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 187.144.121.89 (dsl-89-121-144-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:04:30.214327 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:225170) triggered by 187.144.121.89 (dsl-89-121-144-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:04:30.214327 2026] [security2:error] [pid 12562:tid 12562] [client 187.144.121.89:35905] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||morninginc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "morninginc.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "autJfqdKeFOKt-Op3CbXKAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-03 09:34:23
UTC ·
(3 days ago)
[03/Nov/2026:11:34:23 +0200] -- 187.144.121.89 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-json/ HTTP/1.1
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-03 02:04:14
UTC ·
(3 days ago)
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0
Web App Attack
Hacking
🇨🇿
lp
2026-11-02 05:02:41
UTC ·
(4 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 187.144.121.89
2026-11-02T05:51:18+0100 vpn Access-Reject station: 187.144.121.89
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 18:45:55
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 187.144.121.89 (dsl-89-121-144-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 14:45:48.656564 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:225170) triggered by 187.144.121.89 (dsl-89-121-144-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 14:45:48.656564 2026] [security2:error] [pid 2548:tid 2548] [client 187.144.121.89:42418] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||portlunchgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "portlunchgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auY3XDGH0uQjpzoErNbWrQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-31 13:05:15
UTC ·
(5 days ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇫🇮
paissangroup
2026-10-30 03:15:17
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
