🇫🇮
YF
2026-04-23 14:01:17
(3 months ago)
wp-login.php Brute force
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 11:58:32
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 07:58:25.644456 2026] [security2:error] [pid 17118:tid 17118] [client 2a09:bac1:76e0:258::f:3d2:17208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wurkroom.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wurkroom.biz"] [uri "/wp-json/wp/v2/users"] [unique_id "aeoJYT5eXoGdj-cZpPTT1QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ingrowrook
2026-04-23 11:51:00
(3 months ago)
Requesting account password reset on multiple websites
Brute-Force
Hacking
🇺🇸
TPI-Abuse
2026-04-23 10:09:23
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 06:09:19.763727 2026] [security2:error] [pid 2374078:tid 2374173] [client 2a09:bac1:76e0:258::f:3d2:13242] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcdonaldmountainranch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcdonaldmountainranch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aenvz-qs3a5LJmF0QYHJqAAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 09:44:51
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 05:44:44.436791 2026] [security2:error] [pid 3695130:tid 3695130] [client 2a09:bac1:76e0:258::f:3d2:40894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||allotrope.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "allotrope.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aenqDP5O1Hmls0ozw5am8AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 09:28:40
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 05:28:33.136152 2026] [security2:error] [pid 23385:tid 23385] [client 2a09:bac1:76e0:258::f:3d2:9170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grabagame.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grabagame.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aenmQd-rLGxxnJqwRgkSZQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 09:04:04
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 05:03:57.406284 2026] [security2:error] [pid 2329:tid 2329] [client 2a09:bac1:76e0:258::f:3d2:32318] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coyotebytes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coyotebytes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aengfbkulfdlvml5Nzc-eQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 08:41:21
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 04:41:15.782073 2026] [security2:error] [pid 1736752:tid 1736752] [client 2a09:bac1:76e0:258::f:3d2:23530] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||puckerbottombikinis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puckerbottombikinis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aenbKxt_ydOfxbFWM1XM0QAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 08:12:54
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 04:12:49.729163 2026] [security2:error] [pid 10834:tid 10834] [client 2a09:bac1:76e0:258::f:3d2:26506] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||margroberts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "margroberts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aenUgY1m1MXOHQd3prRxxAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Cognisant-Security
2026-04-23 07:07:00
(3 months ago)
Used password reset from an unauthorised IP Address
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-04-23 06:50:18
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 02:50:10.777184 2026] [security2:error] [pid 10518:tid 10518] [client 2a09:bac1:76e0:258::f:3d2:31576] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newcastle91.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newcastle91.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aenBIhYWUYCSZLaMRnCiygAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 06:26:48
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 02:26:44.500631 2026] [security2:error] [pid 3393023:tid 3393023] [client 2a09:bac1:76e0:258::f:3d2:35610] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||enriquejezik.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enriquejezik.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aem7pADDabp5zf5vCN36SQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 06:00:48
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 02:00:40.282495 2026] [security2:error] [pid 15712:tid 15712] [client 2a09:bac1:76e0:258::f:3d2:15822] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boaredraven.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aem1iAh4vfLIF6st2uGIRwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-04-23 03:29:34
(3 months ago)
-:443 2a09:bac1:76e0:258::f:3d2 - - [23/Apr/2026:05:29:33 +0200] - "POST /wp-login.php?action=lostpa ...
show more
-:443 2a09:bac1:76e0:258::f:3d2 - - [23/Apr/2026:05:29:33 +0200] - "POST /wp-login.php?action=lostpassword HTTP/2.0" 302 176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-23 03:14:10
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 2a09:bac1:76e0:258::f:3d2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 23:14:06.407850 2026] [security2:error] [pid 3181188:tid 3181188] [client 2a09:bac1:76e0:258::f:3d2:44366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fundingworkingcapital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fundingworkingcapital.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aemOfutfmD8dHeGCrgwOeAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack