🇺🇸
TPI-Abuse
2026-06-14 12:08:50
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 08:08:46.368190 2026] [security2:error] [pid 16677:tid 16677] [client 2a01:4f9:c010:b76c::1:48786] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bikinilinks.puckerbikini.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bikinilinks.puckerbikini.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai6ZzuVzsm2bMhj20-_FEwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-06-14 10:27:11
(5 hours ago)
2.994 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-14 08:33:50
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 04:33:44.196861 2026] [security2:error] [pid 29537:tid 29537] [client 2a01:4f9:c010:b76c::1:56108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||high5-vr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "high5-vr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai5naJMxlCLpYy5EphLC9AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2026-06-14 08:26:58
(7 hours ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 07:49:25
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:49:19.158840 2026] [security2:error] [pid 20858:tid 20858] [client 2a01:4f9:c010:b76c::1:49608] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.billwegener.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.billwegener.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ai5c_8XVnajNPObm3a342AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-14 07:17:07
(8 hours ago)
Try to access /xmlrpc.php
Web App Attack
🇳🇱
Alboweb B.V.
2026-06-14 06:15:49
(9 hours ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 01:21:17
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:21:13.975340 2026] [security2:error] [pid 18105:tid 18105] [client 2a01:4f9:c010:b76c::1:33340] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.crystaljohns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crystaljohns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai4CCRL7Z75GFVW80Gy2EAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 22:15:20
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:c010:b76c::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 18:15:15.422956 2026] [security2:error] [pid 21989:tid 21989] [client 2a01:4f9:c010:b76c::1:35672] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||enriquejezik.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enriquejezik.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3Wc1T6WZn42t7G-cx7dAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-12 06:45:19
(2 days ago)
CMS (WordPress or Joomla) brute force attempt.
Brute-Force