🇺🇸
TPI-Abuse
2026-10-26 19:00:49
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedegloba ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedeglobaltelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 15:00:44.460060 2026] [security2:error] [pid 18236:tid 18236] [client 192.141.123.142:12996] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tttns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tttns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at-jXLfI6bRwNvTAQhjllQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 13:21:40
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedegloba ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedeglobaltelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 09:21:36.657016 2026] [security2:error] [pid 13073:tid 13073] [client 192.141.123.142:13481] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||transcapitalsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transcapitalsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at9T4Mc9N_79azGSN9hukwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 08:53:59
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedegloba ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedeglobaltelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:53:52.859897 2026] [security2:error] [pid 13662:tid 13662] [client 192.141.123.142:11891] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drbolen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drbolen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at8VIPHCY28zW9xK9bbLFwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-10-25 12:46:03
(1 day ago)
Wordfence waf block on registrymatters
Web App Attack
🇺🇸
dtorrer
2026-10-25 09:49:13
(1 day ago)
Brute-force general attack.
Brute-Force
🇺🇸
TPI-Abuse
2026-10-24 09:20:29
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedegloba ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedeglobaltelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:20:25.718701 2026] [security2:error] [pid 14596:tid 14596] [client 192.141.123.142:11568] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bronislawsuchanek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bronislawsuchanek.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "atx4WXJ5WfwKICi_1TenWAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-21 14:05:35
(5 days ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 07:12:43
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedegloba ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedeglobaltelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:12:35.495345 2026] [security2:error] [pid 25078:tid 25078] [client 192.141.123.142:12115] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||briannalls.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "briannalls.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "athl42FofEgYmVMKQ39AewAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 05:34:44
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedegloba ...
show more
(mod_security) mod_security (id:225170) triggered by 192.141.123.142 (192.141.123.142.gruporedeglobaltelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 01:34:40.838185 2026] [security2:error] [pid 27865:tid 27865] [client 192.141.123.142:11776] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zezel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zezel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "athO8KBov0FjEhzjtUNiEwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Pingger Shikkoken
2023-11-15 08:47:38
(2 years ago)
Participating in DDoS Amplification Attack! Sending 11 requests over 68727s asking for ?0? of cisco. ...
show more
Participating in DDoS Amplification Attack! Sending 11 requests over 68727s asking for ?0? of cisco.com, atlassian.com, apple.com
show less
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host