🇺🇸
TPI-Abuse
2026-09-20 19:19:05
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 15:18:57.308717 2026] [security2:error] [pid 15891:tid 15891] [client 212.48.70.44:54818] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cubbylure.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cubbylure.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arAxoWERDC1nELmlFYLH4gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-19 23:25:14
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 17:28:10
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 13:28:02.862455 2026] [security2:error] [pid 24836:tid 24836] [client 212.48.70.44:45216] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||anthonyanimalclinic.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "anthonyanimalclinic.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7GIg1oPV89qdt1JyBW-AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-19 17:02:43
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)
Hacking
🇺🇸
masterguru
2026-09-19 16:00:09
(1 day ago)
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operato ...
show more
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. (225170-169)
show less
Hacking
Web App Attack
🇦🇺
A.i.D.A.N.N
2026-09-19 15:09:20
(1 day ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 14:58:52
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:58:46.324948 2026] [security2:error] [pid 14057:tid 14122] [client 212.48.70.44:57506] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eliteproductions.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eliteproductions.tv"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6jJsBnI0T5l0QaKubOFQAAAgE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 14:02:14
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:02:07.762023 2026] [security2:error] [pid 28715:tid 28715] [client 212.48.70.44:50864] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kulacenterky.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kulacenterky.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6V3xdGXv8WbuF8bnKjIwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 12:45:43
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 212.48.70.44 (centaur.gosoto.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 08:45:38.325999 2026] [security2:error] [pid 24702:tid 24702] [client 212.48.70.44:43980] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||spacebooger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "spacebooger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq6D8kv6HKYjnbZL6KfFyAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
masterguru
2026-09-19 11:29:53
(1 day ago)
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operato ...
show more
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. (225170-185)
show less
Hacking
Web App Attack
🇫🇷
Omar Martínez
2026-09-18 05:38:35
(2 days ago)
212.48.70.44 - - [17/Sep/2026:23:38:35 -0600] "GET /wp-json/wp/v2/users HTTP/1.1" 200 7442 "-" "Mozi ...
show more
212.48.70.44 - - [17/Sep/2026:23:38:35 -0600] "GET /wp-json/wp/v2/users HTTP/1.1" 200 7442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
...
show less
Phishing
Email Spam
Blog Spam
🇩🇪
rh24
2026-09-18 04:35:29
(2 days ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 212.48.70.44 (GB/United Kingdom/centau ...
show more
(wordpress-user-enum) Failed wordpress-user-enum trigger from 212.48.70.44 (GB/United Kingdom/centaur.gosoto.co): (CF_ENABLE)
show less
Brute-Force
🇩🇪
todix
2026-09-17 19:24:39
(3 days ago)
WebAttack or semilar from 212.48.70.44
Web App Attack
🇫🇷
masterguru
2026-09-17 13:25:29
(3 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
🇺🇸
mnsf
2026-09-17 10:05:09
(3 days ago)
Abuse Detected (11)
Brute-Force
Web App Attack