🇺🇸
TPI-Abuse
2026-06-04 10:04:47
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 06:04:42.399040 2026] [security2:error] [pid 22755:tid 22755] [client 2804:1254:6000:a:250:56ff:feb1:cc84:33798] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lesdaniels.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lesdaniels.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiFNuuISLibY03XKQg_EJgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 22:20:00
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 18:19:53.462090 2026] [security2:error] [pid 17430:tid 17447] [client 2804:1254:6000:a:250:56ff:feb1:cc84:58032] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.plumeraproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.plumeraproductions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiCoiSzpsKzuewSy7nn1YAAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-03 22:16:22
(17 hours ago)
(wp_login_try) srv103 WP Login Attempt 2804:1254:6000:a:250:56ff:feb1:cc84 (BR/Brazil/-): 10 in the ...
show more
(wp_login_try) srv103 WP Login Attempt 2804:1254:6000:a:250:56ff:feb1:cc84 (BR/Brazil/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 20:33:43
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 16:33:39.354202 2026] [security2:error] [pid 5449:tid 5449] [client 2804:1254:6000:a:250:56ff:feb1:cc84:35354] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.photosatthebeach.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.photosatthebeach.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiCPo5gAatNYV9hO5czdPgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 09:08:49
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 05:08:44.940429 2026] [security2:error] [pid 32334:tid 32350] [client 2804:1254:6000:a:250:56ff:feb1:cc84:42156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||conservativelabor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "conservativelabor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah_vHIVmv6vjtD5uor0DcAAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 13:32:14
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 09:32:05.749368 2026] [security2:error] [pid 9997:tid 9997] [client 2804:1254:6000:a:250:56ff:feb1:cc84:47724] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.smoothiessoupssalads.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.smoothiessoupssalads.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah7bVQp8TkqqmN0__iIIugAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 10:47:27
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:47:20.408421 2026] [security2:error] [pid 17378:tid 17378] [client 2804:1254:6000:a:250:56ff:feb1:cc84:55982] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.velvetculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.velvetculture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah60uGu_s82Vn6P2PQrOggAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 18:20:54
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 14:20:48.230796 2026] [security2:error] [pid 19720:tid 19720] [client 2804:1254:6000:a:250:56ff:feb1:cc84:55316] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coolcustomproducts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coolcustomproducts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agtYgLq_3zm-D4VkF8NfHAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 16:45:20
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 12:45:08.722726 2026] [security2:error] [pid 3174:tid 3174] [client 2804:1254:6000:a:250:56ff:feb1:cc84:38864] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gilgoinn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gilgoinn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agtCFBivu4pyJBgf89i0TgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
zam
2026-05-18 04:12:22
(2 weeks ago)
2804:1254:6000:a:250:56ff:feb1:cc84 - - [18/May/2026:04:12:21 +0000] "POST /xmlrpc.php HTTP/1.1" 403 ...
show more
2804:1254:6000:a:250:56ff:feb1:cc84 - - [18/May/2026:04:12:21 +0000] "POST /xmlrpc.php HTTP/1.1" 403 239
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 17:32:25
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 13:32:18.280368 2026] [security2:error] [pid 15947:tid 15947] [client 2804:1254:6000:a:250:56ff:feb1:cc84:47448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hsoftwaresystems.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hsoftwaresystems.net"] [uri "/wp-json/wp/v2/users"] [unique_id "agn7ostmCcgjAfhFTkwsgwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-17 09:55:10
(2 weeks ago)
Bad Web Bot
Web App Attack
2026-05-16 09:00:04
(2 weeks ago)
| [Dangerous/Brazil] Aggressive IP 2804:1254:6000:a:250:56ff:feb1:cc84 (~30 hits). Type: DoS Defende ...
show more
| [Dangerous/Brazil] Aggressive IP 2804:1254:6000:a:250:56ff:feb1:cc84 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇩🇪
LRob.fr
2026-05-14 18:00:08
(2 weeks ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-14 16:28:52
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2804:1254:6000:a:250:56ff:feb1:cc84 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 12:28:47.599675 2026] [security2:error] [pid 9323:tid 9323] [client 2804:1254:6000:a:250:56ff:feb1:cc84:47760] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||healingworksmassage.studio|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "healingworksmassage.studio"] [uri "/wp-json/wp/v2/users"] [unique_id "agX4P_FNOV-pyGYmmEXbsQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack