🇺🇸
TPI-Abuse
2026-04-10 20:40:44
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 16:40:37.565491 2026] [security2:error] [pid 2237898:tid 2237898] [client 31.134.7.55:60613] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eta-mct.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eta-mct.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adlgRYrkU0Ag7Ykh5Jl1YAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-10 10:12:58
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 06:12:51.784723 2026] [security2:error] [pid 3839353:tid 3839353] [client 31.134.7.55:39609] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||edgecomix.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edgecomix.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adjNI4pQ8URI13Ln-4FpaQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-10 05:02:36
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 01:02:31.907124 2026] [security2:error] [pid 1240207:tid 1240207] [client 31.134.7.55:46571] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drgracetomastolentino.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drgracetomastolentino.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adiEZ4ocCuFsZW5Vo7oQtwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-09 19:25:54
(2 months ago)
31.134.7.55 - - [09/Apr/2026:21:25:54 +0200] "GET /wp-json/wp/v2/users HTTP/2.0" 301 169 "-" "Go-htt ...
show more
31.134.7.55 - - [09/Apr/2026:21:25:54 +0200] "GET /wp-json/wp/v2/users HTTP/2.0" 301 169 "-" "Go-http-client/2.0"
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-09 15:45:16
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 11:45:08.255867 2026] [security2:error] [pid 1178243:tid 1178258] [client 31.134.7.55:42963] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dasperformance.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dasperformance.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adfJhBwg6efK4eJngZhuegAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Mundo Bueno
2026-04-07 04:54:20
(2 months ago)
[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users | Pays: FI | UA: Go-http-client/2.0
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 00:56:12
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.7.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 20:56:04.796210 2026] [security2:error] [pid 1128173:tid 1128173] [client 31.134.7.55:55163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ashleycroft.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ashleycroft.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adRWJGGp5uiSvbJLESx93gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-12-29 02:46:00
(5 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇫🇷
masterguru
2025-12-23 10:59:05
(5 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.7.55 (FI/Finland/-): 1 in the last 3600 ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.7.55 (FI/Finland/-): 1 in the last 3600 secs (0-193)
show less
Hacking