🇺🇸
TPI-Abuse
2025-09-11 06:43:00
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 02:42:53.642725 2025] [security2:error] [pid 7119:tid 7119] [client 201.46.124.253:1182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aMJvbWilVpeTaI5RpZC9mwAAABE"], referer: https://jolankagroup.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2025-09-11 06:38:39
(1 year ago)
(wordpress) Failed wordpress login from 201.46.124.253 (CO/Colombia/Bogota D.C./Bogotá/-/[redacted])
Brute-Force
🇺🇸
TPI-Abuse
2025-09-09 10:58:16
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 06:58:12.055017 2025] [security2:error] [pid 17689:tid 17689] [client 201.46.124.253:1120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hendersonhomes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hendersonhomes.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aMAIRCHkVaOseEn-Nn6m6wAAABM"], referer: https://hendersonhomes.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
antikirra
2025-08-18 16:06:36
(1 year ago)
Proxy Port Scanning
Port Scan
🇧🇷
hostseries
2025-08-15 23:03:00
(1 year ago)
Trigger: LF_DISTATTACK
Brute-Force
🇺🇸
TPI-Abuse
2025-07-29 10:47:22
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 06:47:14.825823 2025] [security2:error] [pid 22111:tid 22111] [client 201.46.124.253:1197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||primacomm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "primacomm.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aIimsjj1hTLc-YFcIEib2gAAAAc"], referer: https://primacomm.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Nicolmn
2025-07-18 22:41:39
(1 year ago)
Web form spam ( id mmmg.b )
Web Spam
🇳🇱
Futunk
2025-07-17 09:39:46
(1 year ago)
Form spam (honeypot): POST /contact
Web Spam
2025-07-17 07:04:56
(1 year ago)
201.46.124.253 - - [17/Jul/2025:09:04:21 +0200] "POST /?tx_laposta_subscribe%5Baction%5D=rest&tx_lap ...
show more
201.46.124.253 - - [17/Jul/2025:09:04:21 +0200] "POST /?tx_laposta_subscribe%5Baction%5D=rest&tx_laposta_subscribe%5Bcontroller%5D=Subscriptionlist&cHash=33127346199ce3afbc6bd4907bc5d8d9 HTTP/1.1" 301 5924 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
201.46.124.253 - - [17/Jul/2025:09:04:29 +0200] "POST /?tx_laposta_subscribe%5Baction%5D=rest&tx_laposta_subscribe%5Bcontroller%5D=Subscriptionlist&cHash=33127346199ce3afbc6bd4907bc5d8d9 HTTP/1.1" 301 5924 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
201.46.124.253 - - [17/Jul/2025:09:04:35 +0200] "POST /academy-login?tx_laposta_subscribe%5Baction%5D=rest&tx_laposta_subscribe%5Bcontroller%5D=Subscriptionlist&cHash=77ab96da8b421fec0bb5c6744cb818bc HTTP/1.1" 301 5950 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
201
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-07-02 13:51:32
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 02 09:51:25.532172 2025] [security2:error] [pid 21929:tid 21929] [client 201.46.124.253:1260] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||barigby.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barigby.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aGU5XXasB5ndf7pBIqFqHwAAAAo"], referer: https://barigby.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
CrystalMaker
2025-06-30 08:27:00
(1 year ago)
Form spam
Web Spam
🇬🇧
CrystalMaker
2025-06-28 10:32:26
(1 year ago)
Vulnerability scan - POST /cgi-bin/contact/register48.pl; POST /cgi-bin/contact/register48.pl
Hacking
🇺🇸
TPI-Abuse
2025-06-25 09:52:09
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 25 05:52:05.183525 2025] [security2:error] [pid 269934:tid 269934] [client 201.46.124.253:1078] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aFvGxWpnToaER7JEOPwCTQAAAAY"], referer: https://jolankagroup.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-23 16:37:15
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 201.46.124.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 12:37:07.893715 2025] [security2:error] [pid 2728295:tid 2728295] [client 201.46.124.253:1294] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aemcmullin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aemcmullin.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aFmCswgf-IMlbDy4R6pqSwAAAAE"], referer: https://aemcmullin.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2025-06-19 22:10:13
(1 year ago)
WAF: Information Disclosure Attempt in WordPress 2- server02
Email Spam
Brute-Force