🇨🇿
ptlab
2026-06-16 16:45:46
(1 day ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 09:55:34
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 05:55:18.557881 2026] [security2:error] [pid 23678:tid 23678] [client 213.232.123.140:40237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cyberclay.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cyberclay.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajEdhhljETNZKkMf5BNYhgAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 18:07:32
(3 days ago)
WordPress login attempt
Brute-Force
🇩🇪
Lino Project
2026-06-13 11:36:07
(5 days ago)
213.232.123.140 - - [13/Jun/2026:13:36:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3987 "-" "Mozilla/5 ...
show more
213.232.123.140 - - [13/Jun/2026:13:36:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3987 "-" "Mozilla/5.0 (Linux; Android 10; SM-G975F Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/84.0.4147.111 Mobile Safari/537.36 GSA/11.22.11.21.arm64"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:52:30
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:52:14.414273 2026] [security2:error] [pid 6406:tid 6406] [client 213.232.123.140:23773] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcwyo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcwyo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aieb_si7_rhlT7S_w72WEQAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-31 17:14:06
(2 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-27 22:07:08
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 18:06:52.930157 2026] [security2:error] [pid 23261:tid 23261] [client 213.232.123.140:23447] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rokket.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rokket.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahdq_OgkLKio-noWa1E4kwAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 14:23:25
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:23:11.878800 2026] [security2:error] [pid 26521:tid 26521] [client 213.232.123.140:19035] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fnavarro.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fnavarro.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahRbTz64JddyxuOJW4PpHAAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 13:09:53
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.123.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 09:09:36.121629 2026] [security2:error] [pid 31054:tid 31054] [client 213.232.123.140:57059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||1healthplace.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "1healthplace.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adJfEK_T8-MzPr9nU6u7ewAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-03-30 06:01:36
(2 months ago)
Web password guessing
Brute-Force
🇨🇭
backslash
2025-04-29 14:05:03
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇷🇺
sms.ru
2024-09-24 18:40:04
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack