🇺🇸
AutoAddOnStore
2025-10-13 17:52:00
UTC ·
(1 year ago)
Probing for vulnerabilities
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-13 00:43:48
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 20:43:41.703950 2025] [security2:error] [pid 17763:tid 17763] [client 188.166.253.68:59455] ...
show more
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 20:43:41.703950 2025] [security2:error] [pid 17763:tid 17763] [client 188.166.253.68:59455] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.abundancecompany.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abundancecompany.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOxLPRXSeD5ss0_heK-XqgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-13 00:35:08
UTC ·
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
Jason Howell
2025-10-13 00:35:01
UTC ·
(1 year ago)
188.166.253.68 - - [12/Oct/2025:19:34:57 -0500] "POST //xmlrpc.php HTTP/1.1" 200 620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
188.166.253.68 - - [12/Oct/2025:19:34:58 -0 ...
show more
188.166.253.68 - - [12/Oct/2025:19:34:57 -0500] "POST //xmlrpc.php HTTP/1.1" 200 620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
188.166.253.68 - - [12/Oct/2025:19:34:58 -0500] "POST //xmlrpc.php HTTP/1.1" 200 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
188.166.253.68 - - [12/Oct/2025:19:34:59 -0500] "POST //xmlrpc.php HTTP/1.1" 200 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
188.166.253.68 - - [12/Oct/2025:19:35:00 -0500] "POST //xmlrpc.php HTTP/1.1" 200 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
188.166.253.68 - - [12/Oct/2025:19:35:01 -0500] "POST //xmlrpc.php HTTP/1.1" 200 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck
...
show less
Web App Attack
🇩🇪
Kreapptivo
2025-10-13 00:22:52
UTC ·
(1 year ago)
[13/Oct/2025:02:22:49 +0200] Web-Request: "GET //wp-includes/wlwmanifest.xml", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
Bad Web Bot
Web App Attack
🇺🇸
agenciahypelab.com.br
2025-10-13 00:13:33
UTC ·
(1 year ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-10-12 23:31:28
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 19:31:21.275719 2025] [security2:error] [pid 25900:tid 25900] [client 188.166.253.68:53285] ...
show more
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 19:31:21.275719 2025] [security2:error] [pid 25900:tid 25900] [client 188.166.253.68:53285] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.abilityengraving.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abilityengraving.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOw6SSYXE8m618s0SnMfywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-12 22:56:24
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 18:56:19.464504 2025] [security2:error] [pid 743:tid 743] [client 188.166.253.68:55638] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 18:56:19.464504 2025] [security2:error] [pid 743:tid 743] [client 188.166.253.68:55638] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.abcollie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abcollie.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOwyE1-0yrF32OwzO6xFFgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2025-10-12 22:39:12
UTC ·
(1 year ago)
188.166.253.68 - - [13/Oct/2025:
...
Brute-Force
🇺🇸
TPI-Abuse
2025-10-12 21:51:17
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 17:51:12.773733 2025] [security2:error] [pid 23077:tid 23077] [client 188.166.253.68:50771] ...
show more
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 17:51:12.773733 2025] [security2:error] [pid 23077:tid 23077] [client 188.166.253.68:50771] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.arsenaultartistmanagement.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.arsenaultartistmanagement.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOwi0IjhI5XWdyXm6wsjlwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-12 21:34:43
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 17:34:35.653778 2025] [security2:error] [pid 32478:tid 32478] [client 188.166.253.68:59189] ...
show more
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 17:34:35.653778 2025] [security2:error] [pid 32478:tid 32478] [client 188.166.253.68:59189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.aaattanasio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aaattanasio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOwe6_tm9DRxYPfffPBhuQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2025-10-12 21:10:41
UTC ·
(1 year ago)
(wordpress) Failed wordpress login from 188.166.253.68 (SG/Singapore/-)
Brute-Force
🇮🇱
Dolphi
2025-10-12 18:40:06
UTC ·
(1 year ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
mnsf
2025-10-12 18:05:24
UTC ·
(1 year ago)
Too many Status 40X (21)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-10-12 16:56:26
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 12:56:20.047488 2025] [security2:error] [pid 2175:tid 2175] [client 188.166.253.68:59638] M ...
show more
(mod_security) mod_security (id:225170) triggered by 188.166.253.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 12:56:20.047488 2025] [security2:error] [pid 2175:tid 2175] [client 188.166.253.68:59638] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.7bsuperfruit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.7bsuperfruit.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOvdtHw6ed8arpr1wKTgXQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack