🇺🇸
TPI-Abuse
2026-08-23 22:18:56
(16 minutes ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 18:18:53.287694 2026] [security2:error] [pid 20741:tid 20741] [client 2a02:6ea0:d13e:1::e017:51288] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||415test.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "415test.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aotxzb4tVbHZoupMTJhjCwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 21:59:08
(36 minutes ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 17:59:00.113639 2026] [security2:error] [pid 22691:tid 22811] [client 2a02:6ea0:d13e:1::e017:51255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fastesttrademark.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fastesttrademark.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aottJFCJMIWKpgjiF4NLWwAAAhA"], referer: https://wordpress.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-23 21:33:56
(1 hour ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-login.php | 2026-08-23 21:33 UTC
show less
Hacking
Web App Attack
🇩🇪
ger-stg-sifi1
2026-08-23 21:02:51
(1 hour ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 20:09:29
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 16:09:21.743812 2026] [security2:error] [pid 30665:tid 30665] [client 2a02:6ea0:d13e:1::e017:52637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||3beeze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "3beeze.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aotTcZ8doq9OGFrOXvOPSQAAAAI"], referer: https://t.co/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 18:57:52
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 14:57:45.172301 2026] [security2:error] [pid 28652:tid 28652] [client 2a02:6ea0:d13e:1::e017:52192] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ferrarapanfitness.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ferrarapanfitness.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aotCqXBXS9VJDQJ_71DGPgAAAAE"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-08-23 18:32:08
(4 hours ago)
2a02:6ea0:d13e:1::e017 - - [23/Aug/2026:12:32:08 -0600] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "pytho ...
show more
2a02:6ea0:d13e:1::e017 - - [23/Aug/2026:12:32:08 -0600] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "python-requests/2.34.2"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 18:00:07
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 13:59:59.512814 2026] [security2:error] [pid 23109:tid 23109] [client 2a02:6ea0:d13e:1::e017:63291] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||f40ph.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "f40ph.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aos1H70g5Vey0CmWzufCgwAAABQ"], referer: https://t.co/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 16:50:57
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 12:50:52.870500 2026] [security2:error] [pid 26737:tid 26737] [client 2a02:6ea0:d13e:1::e017:55552] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||yerevanpress.am|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "yerevanpress.am"] [uri "/wp-json/wp/v2/users"] [unique_id "aosk7JTZ3kTNL4Clhr1fTAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 16:01:23
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 12:01:16.913873 2026] [security2:error] [pid 30788:tid 30788] [client 2a02:6ea0:d13e:1::e017:52642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||famagustacyprus.eu|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "famagustacyprus.eu"] [uri "/wp-json/wp/v2/users"] [unique_id "aosZTHaxmQTCqiPszmAVEwAAABQ"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 15:22:37
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:22:33.615035 2026] [security2:error] [pid 19130:tid 19130] [client 2a02:6ea0:d13e:1::e017:54551] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.oliverhardy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.oliverhardy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aosQOfrWpfmx6FUp6In51wAAABQ"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 14:44:16
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:6ea0:d13e:1::e017 (unn-sgp.cdn77.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 10:44:08.950557 2026] [security2:error] [pid 17664:tid 17664] [client 2a02:6ea0:d13e:1::e017:59185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.brianwhitty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.brianwhitty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aosHOHib3kEcaQyXChwftAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-23 13:52:46
(8 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇳🇱
Site.eu
2026-08-23 13:44:48
(8 hours ago)
Excessive 404/403 errors
Brute-Force
2026-08-23 13:40:09
(8 hours ago)
| [Dangerous/Singapore] Aggressive IP 2a02:6ea0:d13e:1::e017 (~30 hits). Type: DoS Defender- Web ser ...
show more
| [Dangerous/Singapore] Aggressive IP 2a02:6ea0:d13e:1::e017 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection