🇺🇸
TPI-Abuse
2026-10-26 10:48:45
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 06:48:40.669902 2026] [security2:error] [pid 9254:tid 9254] [client 217.16.131.58:39240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brianwhitty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brianwhitty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at8wCETU2XbKIFoUmce6PQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-26 08:12:20
(9 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇩🇪
Vegascosmetics
2026-10-26 07:55:02
(10 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 67>=65, Abuse 65, NonEU, first-seen, Change* path)
show less
Hacking
Exploited Host
Web App Attack
🇺🇸
lostswordfish.com
2026-10-25 13:48:03
(1 day ago)
Wordfence waf block on robdarnell
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 04:46:08
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 00:46:01.992886 2026] [security2:error] [pid 30229:tid 30229] [client 217.16.131.58:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bradleybarefoot.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bradleybarefoot.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "athDiaaR3K4SlhSqdQvOTwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-21 04:15:11
(5 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 02:08:15
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 22:08:12.052378 2026] [security2:error] [pid 6338:tid 6338] [client 217.16.131.58:36754] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||velocitymech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "velocitymech.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atgejNobnUHcFImSrbowBQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-10-16 20:56:05
(1 week ago)
Detected by WP fail2ban
2026-10-16T22:56:05.102234+02:00 wordpress: Authentication attempt from 217. ...
show more
Detected by WP fail2ban
2026-10-16T22:56:05.102234+02:00 wordpress: Authentication attempt from 217.16.131.58
show less
Brute-Force
Web App Attack
2026-10-16 20:45:09
(1 week ago)
🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 07:16:18
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:16:13.282797 2026] [security2:error] [pid 11611:tid 11611] [client 217.16.131.58:58998] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||exhaustthelimits.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "exhaustthelimits.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atHPPaB9K2-JlBkv3-DFCgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 07:55:27
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 217.16.131.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:55:19.813432 2026] [security2:error] [pid 22357:tid 22357] [client 217.16.131.58:55720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||admin.casaniagara.com.mx.elpais.mx|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.casaniagara.com.mx.elpais.mx"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atCG5zD_DwN-N1C-P9cBXAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mk-dizajn.hr
2026-10-15 01:44:02
(1 week ago)
$f2bV_matches
Brute-Force
🇳🇱
Site.eu
2026-10-14 22:31:04
(1 week ago)
Excessive 404/403 errors
Brute-Force
2026-10-14 17:02:30
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇬🇧
gigatech
2026-10-09 22:10:04
(2 weeks ago)
Webserver Probing
Web App Attack
