๐บ๐ธ
TPI-Abuse
2026-06-21 18:33:02
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 14:32:55.083123 2026] [security2:error] [pid 28585:tid 28585] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:38644] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||websitesforauthors.design|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "websitesforauthors.design"] [uri "/wp-json/wp/v2/users"] [unique_id "ajguV7UC9uuz13qtupSglgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 13:07:50
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 09:07:45.545591 2026] [security2:error] [pid 2367:tid 2367] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:52672] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tttns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tttns.com"] [uri "/about-jason/wp-json/wp/v2/users"] [unique_id "ajfiIXonBd9IbuaIkziPbgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 10:20:56
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 06:20:48.290036 2026] [security2:error] [pid 29569:tid 29569] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:53422] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||johncyphers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "johncyphers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aje7AJoYMIFO_EiQG-IFVAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 04:48:41
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 00:48:32.861873 2026] [security2:error] [pid 30693:tid 30693] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:33822] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.aroilcontrolsystem.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aroilcontrolsystem.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdtIDCJwZ-_T8jbAP_gngAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 02:31:55
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 22:31:47.280747 2026] [security2:error] [pid 29903:tid 29903] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:40618] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.goodfrequencies.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.goodfrequencies.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdNEwG7SBY1uoKmIVWXlAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
maxpower
2026-06-21 00:22:50
(1 month ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (GB/Uni ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (GB/United Kingdom/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - [21/Jun/2026:02:22:49 +0200] "GET /?author=2 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" "-" host=kleos81.com
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - [21/Jun/2026:02:22:49 +0200] "GET /?author=1 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0" "-" host=kleos81.com
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - [21/Jun/2026:02:22:49 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" 200 1416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" "-" host=kleos81.com
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-06-21 00:09:14
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 20:08:59.600583 2026] [security2:error] [pid 30213:tid 30213] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:41536] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.texascottagebakers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.texascottagebakers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajcrm-v9NV2YBR5NSTGTjQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-20 18:44:45
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 14:44:37.916258 2026] [security2:error] [pid 13827:tid 13827] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:58222] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.graymatterofdc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.graymatterofdc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajbfld83r1dHbnTdI-oD-gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
reznekcs
2026-06-20 01:43:56
(1 month ago)
F2B wordpress ban. Logs: 2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - [20/Jun/2026:03:43:55 +0200] "PO ...
show more
F2B wordpress ban. Logs: 2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - [20/Jun/2026:03:43:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0"
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - [20/Jun/2026:03:43:55 +0200] "POST /wp-login.php HTTP/1.1" 200 3781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-19 11:32:21
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:32:11.464299 2026] [security2:error] [pid 32549:tid 32549] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:57830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bradleybarefoot.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bradleybarefoot.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajUou7HK8K1MD25P6s_MFAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-19 08:16:45
(1 month ago)
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - > www.bbaccademia.it [19/Jun/2026:10:16:44 +0200] "POST / ...
show more
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - > www.bbaccademia.it [19/Jun/2026:10:16:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" "-"
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - > www.bbaccademia.it [19/Jun/2026:10:16:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:51.0) Gecko/20100101 Firefox/51.0" "-"
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - > www.bbaccademia.it [19/Jun/2026:10:16:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" "-"
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - > www.bbaccademia.it [19/Jun/2026:10:16:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0" "-"
2001:19f0:7401:8762:5400:5ff:fe1f:2292 - - > www.bbaccademia.it [19/Jun/2026:10:16:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 117
...
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-19 08:11:19
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 04:11:12.542551 2026] [security2:error] [pid 15879:tid 15879] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:45720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nancyscafeandcatering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajT5oMxyDZXA_8VaG2kgNAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-19 06:46:25
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 02:46:18.837633 2026] [security2:error] [pid 31889:tid 31889] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:48050] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.greensandbeans.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greensandbeans.us"] [uri "/wp-json/wp/v2/users"] [unique_id "ajTluhIstfnOO0SE1WAVtAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-18 13:23:12
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 09:23:04.645336 2026] [security2:error] [pid 30916:tid 30916] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:52226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lukeschicago.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lukeschicago.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajPxOBRJZ04rGozHDiepDQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-18 12:40:20
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:19f0:7401:8762:5400:5ff:fe1f:2292 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 08:40:13.357130 2026] [security2:error] [pid 29262:tid 29262] [client 2001:19f0:7401:8762:5400:5ff:fe1f:2292:55924] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.uphillfarmvt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.uphillfarmvt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajPnLbCjdkOjn2Qb9Q5aewAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack