🇺🇸
lostswordfish.com
2026-06-30 05:22:04
(4 hours ago)
Wordfence waf block on robdarnell
Web App Attack
🇫🇷
ELYAZ
2026-06-29 20:51:32
(12 hours ago)
(y4) Failed scan -byebye- from 198.38.90.144 (US/United States/s12786.usc1.stableserver.net): (CF_E ...
show more
(y4) Failed scan -byebye- from 198.38.90.144 (US/United States/s12786.usc1.stableserver.net): (CF_ENABLE)
show less
Hacking
🇬🇧
ISPLtd
2026-06-29 20:01:29
(13 hours ago)
198.38.90.144 - - [29/Jun/2026:17:01:28 -0300] "GET /wp-login.php
198.38.90.144 - - [29/Jun/2026:17: ...
show more
198.38.90.144 - - [29/Jun/2026:17:01:28 -0300] "GET /wp-login.php
198.38.90.144 - - [29/Jun/2026:17:01:29 -0300] "POST /wp-login.php
...
show less
Hacking
Web App Attack
🇲🇹
Malta
2026-06-29 17:44:14
(15 hours ago)
198.38.90.144 - - [29/Jun/2026:19:44:13 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
198.38.90.144 - - [29/Jun/2026:19:44:13 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-06-29 12:09:06
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 08:09:02.193103 2026] [security2:error] [pid 22808:tid 22808] [client 198.38.90.144:37456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lenorasflowers.lahamradio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lenorasflowers.lahamradio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akJgXuRosFl5LFj_OWr8TQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 11:24:31
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 07:24:27.714040 2026] [security2:error] [pid 3718:tid 3718] [client 198.38.90.144:41154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||techoutletec.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "techoutletec.com"] [uri "/wp-json/wp/v2/users/8"] [unique_id "akJV6_PUhU9o7enkOj7KHwAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 10:31:52
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 06:31:49.453383 2026] [security2:error] [pid 21378:tid 21378] [client 198.38.90.144:47138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||modestosoftwater.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modestosoftwater.net"] [uri "/wp-json/wp/v2/users/1"] [unique_id "akJJla0EsoLlAAFzQCvStAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 09:39:07
(23 hours ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 05:39:03.697612 2026] [security2:error] [pid 15892:tid 15892] [client 198.38.90.144:41836] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ohwaitiforgot.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ohwaitiforgot.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akI9N05rOWaBGZig2vAHDQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 08:46:00
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 04:45:53.474555 2026] [security2:error] [pid 31532:tid 31532] [client 198.38.90.144:53320] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||k2servicesinc.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k2servicesinc.net"] [uri "/wp-json/wp/v2/users"] [unique_id "akIwwbL6Q4c7xQ4-9D7fhQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 08:19:43
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 04:19:38.987450 2026] [security2:error] [pid 7278:tid 7278] [client 198.38.90.144:50482] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||solucionesmercadeodigital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "solucionesmercadeodigital.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akIqmv7hNI4PMYsmZJO9-gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 07:52:19
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 03:52:14.778232 2026] [security2:error] [pid 6725:tid 6725] [client 198.38.90.144:38608] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||forerunnersjazz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "forerunnersjazz.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akIkLpVsxD_BPSWyzOi6zQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 07:35:08
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 03:35:02.135358 2026] [security2:error] [pid 27387:tid 27599] [client 198.38.90.144:53856] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bortec-corp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bortec-corp.com"] [uri "/wp-json/wp/v2/users/10"] [unique_id "akIgJtNHaV2z0va4Fk0ycgAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 04:59:35
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 00:59:27.355221 2026] [security2:error] [pid 7364:tid 7364] [client 198.38.90.144:42702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mkdesignndetailing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mkdesignndetailing.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akH7r8xApDKCHQYlNEl8IwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
ketovoila.pl
2026-06-29 04:10:45
(1 day ago)
ketovoila.pl WordPress user/author enumeration: hits=1; unique_paths=1; sample_paths=/?rest_route=/w ...
show more
ketovoila.pl WordPress user/author enumeration: hits=1; unique_paths=1; sample_paths=/?rest_route=/wp/v2/users&_jsonp=callback&per_page=100&_fields=id,slug; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"; window=2026-06-29T04:10:45Z..2026-06-29T04:10:45Z
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 02:51:57
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 198.38.90.144 (s12786.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 22:51:49.283057 2026] [security2:error] [pid 14000:tid 14000] [client 198.38.90.144:46726] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soudertonbigred.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soudertonbigred.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akHdxdJQw0k5Vg8paVxpzQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack