2026-11-07 19:56:48
UTC ·
(3 days ago)
POST /xmlrpc.php HTTP/1.1
...
Brute-Force
🇺🇸
TPI-Abuse
2026-11-06 20:01:35
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 195.211.215.60 (client-215-60.en.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 15:01:32.106717 2026] [security2:error] [pid 17772:tid 17772] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 195.211.215.60 (client-215-60.en.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 15:01:32.106717 2026] [security2:error] [pid 17772:tid 17772] [client 195.211.215.60:45236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blublk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blublk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au4yHMLoVqH0c8DDyVSnUgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 06:59:37
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 195.211.215.60 (client-215-60.en.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:59:31.914181 2026] [security2:error] [pid 23295:tid 23295] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 195.211.215.60 (client-215-60.en.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:59:31.914181 2026] [security2:error] [pid 23295:tid 23295] [client 195.211.215.60:50930] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||disio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "disio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au160_FXIPD2UWsbfP4stwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-06 01:10:01
UTC ·
(5 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇫🇮
JRID
2026-11-02 21:33:17
UTC ·
(1 week ago)
Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-11-02 00:07:02
UTC ·
(1 week ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇨🇿
lp
2026-11-01 06:03:28
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 195.211.215.60
2026-11-01T06:49:07+0100 vpn Access-Reject station: 195.211.215.60
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 02:56:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 195.211.215.60 (client-215-60.en.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 22:55:53.412040 2026] [security2:error] [pid 8131:tid 8161] [client 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 195.211.215.60 (client-215-60.en.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 22:55:53.412040 2026] [security2:error] [pid 8131:tid 8161] [client 195.211.215.60:48448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||almerirock.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "almerirock.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auaqOWsUw18JgwMihQ-CHgAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-10-31 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-10-30 00:51:02
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 195.211.215.60 (client-215-60.en.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:50:56.866445 2026] [security2:error] [pid 19613:tid 19613] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 195.211.215.60 (client-215-60.en.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:50:56.866445 2026] [security2:error] [pid 19613:tid 19613] [client 195.211.215.60:35266] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tomslawmd.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tomslawmd.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "auPp8M1n4dZtHS5LCVvdSwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
