🇺🇸
nationaleventpros.com
2026-09-05 08:31:13
(3 days ago)
WordPress login attempt
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-03 04:57:40
(5 days ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-02 15:08:33
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 11:08:29.298920 2026] [security2:error] [pid 9009:tid 9009] [client 193.203.8.17:61803] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thestardance.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thestardance.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apg77UQXrDTyVUvWsI6tgAAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 03:59:23
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:59:16.949170 2026] [security2:error] [pid 16972:tid 16972] [client 193.203.8.17:18723] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gewgawdesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gewgawdesigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao0TFFRNfo-WHCDH-9MOygAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 23:47:20
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:47:16.791330 2026] [security2:error] [pid 24772:tid 24772] [client 193.203.8.17:45965] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mukau.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mukau.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoJMBKLxi-MnyatoULH9BAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-13 06:05:04
(3 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇬🇧
gigatech
2026-08-11 16:20:21
(3 weeks ago)
Webserver Probing
Web App Attack
🇮🇹
VHosting
2026-08-11 14:10:03
(4 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 13:54:21
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 09:54:15.825859 2026] [security2:error] [pid 876994:tid 877020] [client 193.203.8.17:65405] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||super-8mm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "super-8mm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ansphxhADYVNgxxhbB1yFAAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 22:51:28
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.8.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 18:51:22.258623 2026] [security2:error] [pid 604158:tid 604158] [client 193.203.8.17:51719] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iceofparadise.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iceofparadise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anJs6ufnxwLbSCY98SYmWgAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-04 18:45:32
(1 month ago)
Web password guessing
Brute-Force
🇪🇸
librebit
2026-07-16 08:07:35
(1 month ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-07-14 21:44:04
(1 month ago)
Brute force
Brute-Force
🇺🇸
nyt
2026-06-22 17:04:02
(2 months ago)
XMLRPC Attack, WP User Enumeration, WP Author Enumeration
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-03-26 23:37:05
(5 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
