🇺🇸
TPI-Abuse
2026-09-20 21:02:02
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:01:54.266859 2026] [security2:error] [pid 10509:tid 10509] [client 206.189.184.213:44766] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||passy.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "passy.us"] [uri "/wp-json/wp/v2/users"] [unique_id "arBJwvIEauzA5XIehKKAWAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 16:54:20
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:54:15.219077 2026] [security2:error] [pid 31339:tid 31339] [client 206.189.184.213:45156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sizefinder.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sizefinder.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arAPt7AEqD48Apxu5h2HqAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-20 08:40:39
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)
Hacking
🇩🇪
FeG Deutschland
2026-09-20 07:55:15
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-09-19 19:11:05
(2 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
🇺🇸
TPI-Abuse
2026-09-19 14:46:10
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:46:03.999657 2026] [security2:error] [pid 11500:tid 11500] [client 206.189.184.213:42382] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||godcanuseyou.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "godcanuseyou.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6gKzte-jCKg7sYyg_1iwAAAD8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 11:51:39
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 07:51:32.431766 2026] [security2:error] [pid 6182:tid 6182] [client 206.189.184.213:56964] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abeltours.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abeltours.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq53RCFmgBkOfsvXyudanQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 10:29:09
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 06:29:04.538592 2026] [security2:error] [pid 18806:tid 18815] [client 206.189.184.213:42892] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.quantumgaze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.quantumgaze.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq5j8C9PyTMBHg15T16PkgAAAUc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-17 22:18:44
(4 days ago)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-09-17 17:05:05
(4 days ago)
Abuse Detected (29)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 16:22:57
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 206.189.184.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 12:22:53.806809 2026] [security2:error] [pid 21957:tid 21957] [client 206.189.184.213:36582] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||crcponcha.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crcponcha.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqwT3Zf4CiXcEX18KC4LcQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Omar Martínez
2026-09-17 16:06:49
(4 days ago)
206.189.184.213 - - [17/Sep/2026:10:06:48 -0600] "GET /wp-json/wp/v2/users HTTP/1.1" 200 7442 "-" "M ...
show more
206.189.184.213 - - [17/Sep/2026:10:06:48 -0600] "GET /wp-json/wp/v2/users HTTP/1.1" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0"
...
show less
Phishing
Email Spam
Blog Spam
🇩🇪
FeG Deutschland
2026-09-17 15:36:13
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇳🇱
BlueWire Hosting
2026-09-17 13:17:45
(4 days ago)
Probing websites for vulnerabilities
Web App Attack
🇳🇱
maxxsense
2026-09-17 11:13:55
(4 days ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 206.189.184.213 (US/United States/-)
Brute-Force
