🇫🇷
dynamix
2026-06-13 21:06:07
(20 hours ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 20:47:33
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.am ...
show more
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 16:47:30.478953 2026] [security2:error] [pid 32179:tid 32179] [client 34.199.233.146:38374] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.prostar.industries|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.prostar.industries"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3B4svY9hAgJDV9qQbdzAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 19:08:42
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.am ...
show more
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 15:08:34.796174 2026] [security2:error] [pid 30462:tid 30462] [client 34.199.233.146:55304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.intothebigempty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.intothebigempty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai2qsl7fGGjYEvpEWcd-GAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-12 21:20:38
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-12 21:04:14
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.am ...
show more
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 17:04:07.600421 2026] [security2:error] [pid 24790:tid 24790] [client 34.199.233.146:58098] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.inquisitivequincie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.inquisitivequincie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aix0R7m9jTdSRW8E3kMJ-QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-12 16:44:08
(2 days ago)
Blocked by CSF 13 firewall - Rule: US/United States/ec2-34-199-233-146.compute-1.amazonaws.com
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 05:40:48
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.am ...
show more
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 01:40:40.472197 2026] [security2:error] [pid 3863:tid 3863] [client 34.199.233.146:35368] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.americanexportimport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.americanexportimport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiub2FZoC6vsZIqwKS4lugAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 00:46:53
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.am ...
show more
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 20:46:45.897788 2026] [security2:error] [pid 30915:tid 30915] [client 34.199.233.146:48994] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||twogocamping.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "twogocamping.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aitW9UCwd7m162aD-_ws0QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-11 21:21:02
(2 days ago)
Bot / scanning and/or hacking attempts: GET /?author=2 HTTP/1.1, GET /?author=3 HTTP/1.1, POST /xmlr ...
show more
Bot / scanning and/or hacking attempts: GET /?author=2 HTTP/1.1, GET /?author=3 HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET /author/admin/ HTTP/1.1, GET /?author=1 HTTP/1.1, GET / HTTP/1.1, POST /wp-login.php HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1.1
show less
Hacking
Web App Attack
🇨🇦
SSH-Admin
2026-06-10 19:00:05
(3 days ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-06-10 18:26:03
(3 days ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 15:50:00
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.am ...
show more
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 11:49:54.411324 2026] [security2:error] [pid 1371:tid 1371] [client 34.199.233.146:38370] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ixd.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ixd.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aimHogXPwDLyrxd7uFYoZwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 11:42:53
(4 days ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 02:57:38
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.am ...
show more
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 22:57:32.313477 2026] [security2:error] [pid 7237:tid 7237] [client 34.199.233.146:38726] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tarekshohaieb.online|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tarekshohaieb.online"] [uri "/wp-json/wp/v2/users"] [unique_id "aijSnNgbsQ4Rm2aQf3u4egAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 18:42:35
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.am ...
show more
(mod_security) mod_security (id:225170) triggered by 34.199.233.146 (ec2-34-199-233-146.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 14:42:31.868686 2026] [security2:error] [pid 2892:tid 2892] [client 34.199.233.146:47234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.texascottagebakers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.texascottagebakers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aicNFwNQUEpxLdja_IzAfAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack