🇪🇸
librebit
2026-07-04 06:10:05
(2 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-06-29 20:07:03
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 213.108.0.103 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 213.108.0.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 16:06:59.130485 2026] [security2:error] [pid 8705:tid 8705] [client 213.108.0.103:48329] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||unified-dispatch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "unified-dispatch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akLQY493gZvmQZRKviK2HwAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 11:43:39
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 213.108.0.103 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 213.108.0.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 07:43:33.072946 2026] [security2:error] [pid 1402:tid 1402] [client 213.108.0.103:14911] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zodiacwin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zodiacwin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj0UZQ7b-_NJKPrIc4kL9wAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 13:59:43
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 213.108.0.103 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 213.108.0.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:59:38.980510 2026] [security2:error] [pid 7433:tid 7433] [client 213.108.0.103:47439] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gensou.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gensou.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVLSt5wECMH33NNR1fCGwAAABo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-02 16:11:45
(7 months ago)
wordpress-trap
Web App Attack
2025-11-18 20:14:09
(7 months ago)
wordpress-trap
Web App Attack
🇳🇱
i-turnradio.nl
2025-08-31 04:04:12
(10 months ago)
2025-08-31 @ 06:04:12 (CET) ~ Blocked for trying to access: /erker/wp/wp-login.php
Web App Attack
2025-03-31 07:31:04
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-03-29 03:32:49
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-02-12 03:30:50
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-12-25 01:14:12
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 213.108.0.103 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 213.108.0.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 24 20:14:08.038725 2024] [security2:error] [pid 3669893:tid 3669893] [client 213.108.0.103:49435] [client 213.108.0.103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||daruwala.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daruwala.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2tcYBQoU4eVXUEB5OI_cwAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-27 19:20:06
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
🇹🇷
rtbh.com.tr
2024-09-03 20:55:00
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
ghostwarriors
2024-09-02 01:20:28
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2024-08-29 22:12:46
(1 year ago)
This IP address has been identified as generating artificial traffic on websites following the purch ...
show more
This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (iPhone; CPU iPhone OS 14_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/86.0.4240.183 Mobile/15E148 Safari/604.1 - -
show less
Bad Web Bot