🇫🇷
ELYAZ
2026-06-21 12:05:53
(1 day ago)
(y4) Failed scan -byebye- from 212.23.216.117 (IR/Iran/117.216.23.212.in-addr.arpa): (CF_ENABLE)
Hacking
2026-06-20 23:27:09
(1 day ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0
Hacking
Web App Attack
🇫🇷
solution.it
2026-06-20 18:32:44
(2 days ago)
[Sat Jun 20 20:32:44.383030 2026] [php7:error] [pid 1327202:tid 1327202] [client 212.23.216.117:3847 ...
show more
[Sat Jun 20 20:32:44.383030 2026] [php7:error] [pid 1327202:tid 1327202] [client 212.23.216.117:38476] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-20 06:47:08
(2 days ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-20 02:07:36
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 22:07:31.296604 2026] [security2:error] [pid 18793:tid 18793] [client 212.23.216.117:57588] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dymesich.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dymesich.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajX146dhFLo5-ebX1kqQpwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 01:34:28
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 21:34:24.092315 2026] [security2:error] [pid 31148:tid 31148] [client 212.23.216.117:49198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coolex.cloudex.link|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coolex.cloudex.link"] [uri "/wp-json/wp/v2/users"] [unique_id "ajXuIOj8x7kL66PHDNVIqQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-20 01:06:01
(2 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 00:37:00
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 20:36:56.348338 2026] [security2:error] [pid 5649:tid 5649] [client 212.23.216.117:35444] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jessicalevant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jessicalevant.com"] [uri "/wp-json/wp/v2/users/5"] [unique_id "ajXgqApmNzWrh0j9OrTVtgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 23:42:41
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 19:42:35.434088 2026] [security2:error] [pid 18901:tid 18901] [client 212.23.216.117:59060] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||buanamegah.kairoslogammakmur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buanamegah.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users/5"] [unique_id "ajXT61aBecxFBiwMM9CZ9AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 22:56:06
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 18:55:59.565970 2026] [security2:error] [pid 9559:tid 9559] [client 212.23.216.117:57392] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||spacebooger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "spacebooger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajXI_6CxfHD3bxST2DFyWAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 13:50:32
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:50:26.253471 2026] [security2:error] [pid 10057:tid 10057] [client 212.23.216.117:53042] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.savingspools.savingshvac.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.savingspools.savingshvac.com"] [uri "/wp-json/wp/v2/users/9"] [unique_id "ajVJIpIq4zofDseB1Gf_4AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-19 13:03:33
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 09:52:28
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 05:52:21.809184 2026] [security2:error] [pid 20036:tid 20036] [client 212.23.216.117:40106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soonerstone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soonerstone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajURVQUyFeek6On1iePAZwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 08:44:20
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.23.216.117 (117.216.23.212.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 04:44:17.209475 2026] [security2:error] [pid 19267:tid 19267] [client 212.23.216.117:33504] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||add-a-heading.xyz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "add-a-heading.xyz"] [uri "/wp-json/wp/v2/users/6"] [unique_id "ajUBYcaRdcvenwD-3SRitQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-06-19 07:46:55
(3 days ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security
DDoS Attack
Hacking
Exploited Host