๐บ๐ธ
TPI-Abuse
2026-03-03 14:09:36
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 09:09:28.619980 2026] [security2:error] [pid 16047:tid 16047] [client 2.59.60.148:11853] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kinhung.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kinhung.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aabrmP_EwKqx_SYvGFp92wAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
FaB Property Group
2026-03-03 10:30:32
(6 months ago)
Requested file: global-protect/login.esp
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 20:56:16
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 15:56:10.932696 2026] [security2:error] [pid 17244:tid 17244] [client 2.59.60.148:47735] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vmmailing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vmmailing.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaX5aq3AoNvvH1n1AD-AzwAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 18:44:35
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 13:44:28.306121 2026] [security2:error] [pid 12620:tid 12620] [client 2.59.60.148:37717] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dougscomputers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dougscomputers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaXajHNI66-iWrBn9iCHqwAAACg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 18:02:44
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 13:02:25.795891 2026] [security2:error] [pid 4983:tid 4983] [client 2.59.60.148:7369] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ourodyssey.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ourodyssey.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aaXQsahrm-Mbeq2NkRCwMwAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 13:34:42
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 08:34:33.807917 2026] [security2:error] [pid 14509:tid 14509] [client 2.59.60.148:64187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||genesis-group.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "genesis-group.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aaWR6b5g1qJ3NngyMW3eiwAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 09:39:05
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 04:39:00.564826 2026] [security2:error] [pid 28067:tid 28067] [client 2.59.60.148:6733] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||yournamehereonline.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "yournamehereonline.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aaVatNecz5jBOWfUSDVElwAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 09:11:50
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 04:11:45.002460 2026] [security2:error] [pid 21325:tid 21325] [client 2.59.60.148:38823] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mwrn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mwrn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaVUUFwozQHlFQjpHgSFswAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 07:38:09
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 02:38:02.426765 2026] [security2:error] [pid 31622:tid 31622] [client 2.59.60.148:45513] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||castagnino.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "castagnino.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaU-WgVmanmCwxEaKmhF7gAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 04:42:47
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 23:42:38.319158 2026] [security2:error] [pid 30644:tid 30648] [client 2.59.60.148:15515] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jonneher.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jonneher.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaUVPjsvWafn_904O_iHGwAAAUI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 04:07:30
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 23:07:26.980912 2026] [security2:error] [pid 26528:tid 26528] [client 2.59.60.148:51555] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pardescommunications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pardescommunications.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaUM_vtin5KMgTmyQ8N4LQAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-03-02 03:50:13
(6 months ago)
Web password guessing
Brute-Force
๐จ๐ญ
backslash
2026-03-02 02:42:00
(6 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-03-02 01:47:36
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 2.59.60.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 20:47:26.977005 2026] [security2:error] [pid 22750:tid 22750] [client 2.59.60.148:64859] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agrisea.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agrisea.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aaTsLrY0jcuGvY_z3sD5aAAAACc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Silly Development
2025-10-24 02:20:08
(10 months ago)
Malicious activity detected from 212238 CDNEXT towards host sillydev.co.uk (GET HTTP/2) @ 2025-10-24 ...
show more
Malicious activity detected from 212238 CDNEXT towards host sillydev.co.uk (GET HTTP/2) @ 2025-10-24T02:20:08Z (11 occurrences)
show less
DDoS Attack
Exploited Host