🇺🇸
TPI-Abuse
2026-06-18 23:47:29
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 19:47:21.356272 2026] [security2:error] [pid 29054:tid 29054] [client 194.79.218.84:57856] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.drbolen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.drbolen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajSDieUQ8QJBs3UShkXq_wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-18 23:45:01
(21 hours ago)
Excessive 404/403 errors
Brute-Force
2026-06-18 23:17:43
(21 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 05:33:15
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 01:33:08.418600 2026] [security2:error] [pid 4707:tid 4707] [client 194.79.218.84:41888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mrflatpeople.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mrflatpeople.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajODFGT5qZptOMsbO9NOMAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-18 00:14:49
(1 day ago)
(wp_login_try) srv104 WP Login Attempt 194.79.218.84 (IT/Italy/-): 10 in the last 3600 secs; Ports: ...
show more
(wp_login_try) srv104 WP Login Attempt 194.79.218.84 (IT/Italy/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 23:42:37
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 19:42:32.818843 2026] [security2:error] [pid 4318:tid 4318] [client 194.79.218.84:33448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dvdmasters.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dvdmasters.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajMw6CjEbqLXKfI7Y49uBwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-06-17 16:40:04
(2 days ago)
Exploited Host
🇺🇸
TPI-Abuse
2026-06-17 12:40:22
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 08:40:15.007926 2026] [security2:error] [pid 8113:tid 8113] [client 194.79.218.84:41050] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hawaiireservations.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hawaiireservations.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajKVr7HwN7bEAfUeKPnEyAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 09:21:05
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 05:20:58.727860 2026] [security2:error] [pid 30765:tid 30765] [client 194.79.218.84:48780] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.edgebiopharma.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.edgebiopharma.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajJm-lrsS936pU8cbL36bwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-17 06:37:47
(2 days ago)
Multiple WAF Violations
Web App Attack
🇹🇷
ycoskun41
2026-06-17 04:25:10
(2 days ago)
fail2ban: plesk-modsecurity jail on genckocaeli.com
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 01:12:42
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 194.79.218.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 21:12:34.404549 2026] [security2:error] [pid 12385:tid 12385] [client 194.79.218.84:45174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.holgerfeld.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.holgerfeld.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajH0ghoFnuCnD4aa3XoehgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-17 00:20:28
(2 days ago)
[server.tmg.gr] httpd-suspicious-path: sites=imeresd.gr; logs=/var/log/httpd/domains/imeresd.gr.log; ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=imeresd.gr; logs=/var/log/httpd/domains/imeresd.gr.log; samples=/wp-json/wp/v2/users | /?author=1 | /author/admin/
show less
Hacking
Web App Attack