🇺🇸
TPI-Abuse
2026-11-11 13:26:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 193.203.9.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:26:07.465051 2026] [security2:error] [pid 9467:tid 9485] [client 193.203.9.245:13799] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 193.203.9.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:26:07.465051 2026] [security2:error] [pid 9467:tid 9485] [client 193.203.9.245:13799] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thomas.kiehnefamily.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thomas.kiehnefamily.us"] [uri "/blog_topics/access.1"] [unique_id "avRs79_O7LF_8H4Q1UgFQgAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-01 01:01:32
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇪🇸
librebit
2026-06-23 02:09:31
UTC ·
(4 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-06-20 17:10:58
UTC ·
(4 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-06-19 12:04:08
UTC ·
(4 months ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-04-11 08:19:45
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.9.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 04:19:42.399959 2026] [security2:error] [pid 4192546:tid 4192566] [client 193.203.9.245:2495 ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.9.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 04:19:42.399959 2026] [security2:error] [pid 4192546:tid 4192566] [client 193.203.9.245:24951] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||onernet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "onernet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adoEHjgciPE5aTDMLL9JCgAAAVE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-04-10 18:45:41
UTC ·
(7 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇦🇺
screwlooseit.com.au
2026-04-08 07:58:05
UTC ·
(7 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
GB/United Kingdom/-
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 17:13:54
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.9.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 13:13:46.891553 2026] [security2:error] [pid 29526:tid 29526] [client 193.203.9.245:58773] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.9.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 13:13:46.891553 2026] [security2:error] [pid 29526:tid 29526] [client 193.203.9.245:58773] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||walterceron.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "walterceron.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac6jyhQN1uXzTvXqeiAwIwAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-26 17:48:00
UTC ·
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-22 00:07:21
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.9.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 20:07:17.488369 2026] [security2:error] [pid 25605:tid 25605] [client 193.203.9.245:26855] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.9.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 20:07:17.488369 2026] [security2:error] [pid 25605:tid 25605] [client 193.203.9.245:26855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emelecsrl.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emelecsrl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab8ytVM4vD4xirAawVTTzwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-16 09:00:42
UTC ·
(1 year ago)
DNS Compromise
DDoS Attack
🇨🇭
backslash
2025-05-17 19:55:04
UTC ·
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇸🇪
vaia.cloud
2025-01-15 04:01:02
UTC ·
(1 year ago)
trying wp-login.php/xmlrpc.php 30 times in 1 minutes
Brute-Force
Web App Attack
🇺🇸
octageeks.com
2024-12-28 05:07:13
UTC ·
(1 year ago)
Wordpress malicious attack:[octaflood]
Web App Attack
