🇺🇸
TPI-Abuse
2026-09-19 23:26:06
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 19:25:57.950843 2026] [security2:error] [pid 12811:tid 12811] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:56602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cartiologyfilms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cartiologyfilms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq8aBWt6eJO515Wv8b875QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 18:12:05
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 14:11:58.077137 2026] [security2:error] [pid 16428:tid 16428] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:55110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hvacmechanalysis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hvacmechanalysis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7QbnH1AOhpZ99oqBnl0QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 17:40:49
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 13:40:42.619743 2026] [security2:error] [pid 12158:tid 12205] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:41892] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eliteproductions.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eliteproductions.tv"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7JGjSynj74ftPydcWIDwAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-09-18 05:00:43
(2 days ago)
WordPress author enumeration
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-17 14:51:31
(2 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 14:00:44
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 10:00:37.664109 2026] [security2:error] [pid 19428:tid 19428] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:56716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bigislandhawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bigislandhawaiirealty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqvyheHx78qd5tQLTq6m6wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 11:26:28
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 07:26:24.199886 2026] [security2:error] [pid 9602:tid 9602] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:51772] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fredlandia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fredlandia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqvOYDR4o-oHWxeKxDxJkwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 09:02:41
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:02:37.023578 2026] [security2:error] [pid 31089:tid 31089] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:47326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||crookedriverbicentennial.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crookedriverbicentennial.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aqusrW9_qnmWsLWFWsVzxgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 06:52:09
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 02:52:01.603160 2026] [security2:error] [pid 27863:tid 27863] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:47204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mikedeutsch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mikedeutsch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aquOEcM1BXMxpjpM4XcUzgAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 05:25:53
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:25:48.693781 2026] [security2:error] [pid 32137:tid 32137] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:55650] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||losbarbarosdelnorte.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "losbarbarosdelnorte.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqt53OXWCt3CJzqTWQnI7QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 04:48:47
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown ...
show more
(mod_security) mod_security (id:225170) triggered by 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:48:39.123552 2026] [security2:error] [pid 30247:tid 30247] [client 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:38972] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ramseycountycorruption.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ramseycountycorruption.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqtxJxCQploDm-1QKTv4WQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-14 10:49:07
(5 days ago)
Try to access /xmlrpc.php
Web App Attack
🇩🇪
on-com
2026-09-11 00:07:47
(1 week ago)
URL scan
Brute-Force
Web App Attack
🇫🇷
ELYAZ
2026-09-07 04:38:13
(1 week ago)
(wordpress) Failed wordpress login from 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): (CF_ENABL ...
show more
(wordpress) Failed wordpress login from 2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19 (Unknown): (CF_ENABLE)
show less
Brute-Force
🇩🇪
4server
2026-09-02 22:41:59
(2 weeks ago)
[ThuSep0300:41:57.0529672026][security2:error][pid2044450:tid2044527][client2406:da1c:ab8:3a00:e172: ...
show more
[ThuSep0300:41:57.0529672026][security2:error][pid2044450:tid2044527][client2406:da1c:ab8:3a00:e172:51eb:2cf1:3c19:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"volcano.ch\"][uri\"/xmlrpc.php\"][unique_id\"apimNQp1sLt9e2EEhgzXGAAAAJA\"]
show less
Port Scan
Brute-Force
Web App Attack
