🇫🇷
dynamix
2026-06-11 12:19:02
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 11:54:02
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 07:53:56.015820 2026] [security2:error] [pid 31055:tid 31055] [client 193.151.189.169:12955] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||panmaneecnc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "panmaneecnc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqh1C2enTrDQpzp3HLzPgAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 23:22:37
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 19:22:31.188773 2026] [security2:error] [pid 18626:tid 18626] [client 193.151.189.169:32643] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bkspeck.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bkspeck.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiNaN4f9nPrvpmrWK0KVzwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 12:38:48
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 08:38:41.381354 2026] [security2:error] [pid 19823:tid 19875] [client 193.151.189.169:32999] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dulemba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dulemba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahwr0a51ypfq-FTOqK5ZGQAAAIs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 14:16:22
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 10:16:16.814093 2026] [security2:error] [pid 29677:tid 29677] [client 193.151.189.169:29505] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||randyshelly.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "randyshelly.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahrxMEpqLNm2oD2KFmNyHQAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-05-12 11:26:38
(1 month ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 12:45:53
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 08:45:45.695357 2026] [security2:error] [pid 19999:tid 19999] [client 193.151.189.169:50595] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||firstunitedreserve.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firstunitedreserve.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af8sefWEA1Hv4w0INGjWvgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-04-15 02:42:00
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-12 23:39:53
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 19:39:48.949126 2026] [security2:error] [pid 4156531:tid 4156531] [client 193.151.189.169:63201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||randyshelly.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "randyshelly.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adwtRJWO4C4aazbAnVArvAAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-11 06:23:00
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 02:22:55.274404 2026] [security2:error] [pid 3271221:tid 3271221] [client 193.151.189.169:11905] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thecalls.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thecalls.net"] [uri "/wp-json/wp/v2/users"] [unique_id "adnov1Nl4u-P7deG369vlAAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 19:42:26
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 15:42:21.895971 2026] [security2:error] [pid 14044:tid 14044] [client 193.151.189.169:42459] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||med-engineering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "med-engineering.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac7GnRFteH4vxcGeWMZgGgAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 18:41:11
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 14:41:06.074695 2026] [security2:error] [pid 26403:tid 26403] [client 193.151.189.169:59103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pastorg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pastorg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac64QtrFWztBGUbJ29g42gAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(4 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-01-27 15:01:33
(4 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.151.189.169 (NL/The Netherlands/-): 1 in t ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.151.189.169 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇫🇷
masterguru
2026-01-25 00:24:05
(5 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.151.189.169 (NL/The Netherlands/-): 1 in t ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 193.151.189.169 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
show less
Hacking