🇺🇸
TPI-Abuse
2026-10-19 22:13:31
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 18:13:24.330214 2026] [security2:error] [pid 9686:tid 9686] [client 213.226.76.111:33633] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||solporpoise.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "solporpoise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ataWBLuS_6DnaAVoiJQu_QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 19:13:40
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 15:13:36.692075 2026] [security2:error] [pid 8047:tid 8047] [client 213.226.76.111:46087] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||silalaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "silalaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atZr4GExE3ILl2sM-xoboAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-19 11:12:14
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 10:30:06
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 06:29:55.269310 2026] [security2:error] [pid 27317:tid 27317] [client 213.226.76.111:58050] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rodandreelpiercam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodandreelpiercam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atXxI2j7meMUIl3fOBRMhAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 07:23:13
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 03:23:06.429347 2026] [security2:error] [pid 11917:tid 11917] [client 213.226.76.111:40288] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||reelfaithpodcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reelfaithpodcast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atXFWvNfY3CF2gktTWX4wAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 22:32:28
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 18:32:22.046272 2026] [security2:error] [pid 28648:tid 28648] [client 213.226.76.111:34030] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pikespeakjazz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pikespeakjazz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atVI9sHfd5YsIzJl-FlxrwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-18 16:18:09
(3 days ago)
[osotir.org] httpd-suspicious-path: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir.org.log ...
show more
[osotir.org] httpd-suspicious-path: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir.org.log; samples=/wp-json/wp/v2/users
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 10:37:19
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:37:13.709904 2026] [security2:error] [pid 4861:tid 4869] [client 213.226.76.111:56389] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nimbll.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nimbll.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atShWQHJoNOOCgH4vYMB_gAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 04:46:32
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.226.76.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:46:24.103220 2026] [security2:error] [pid 5616:tid 5616] [client 213.226.76.111:39701] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||monmouthcountydanceclasses.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "monmouthcountydanceclasses.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atRPIIrjldRGOR6j8l3hCQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
