🇺🇸
TPI-Abuse
2026-06-25 03:13:29
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 23:13:22.292574 2026] [security2:error] [pid 5090:tid 5099] [client 37.27.110.171:32916] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||travelusa.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "travelusa.us"] [uri "/wp-json/wp/v2/users/8"] [unique_id "ajyc0rr59p0sk4Bg_XCaigAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-06-24 21:07:14
(3 days ago)
(wordpress) Failed wordpress login from 37.27.110.171 (FI/Finland/Uusimaa/Helsinki/c2.suncomet.fi/[r ...
show more
(wordpress) Failed wordpress login from 37.27.110.171 (FI/Finland/Uusimaa/Helsinki/c2.suncomet.fi/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-23 18:25:37
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 14:25:31.716141 2026] [security2:error] [pid 26747:tid 26747] [client 37.27.110.171:52452] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bundrenfarmstn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bundrenfarmstn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajrPm0ZrhPaF7zUo4q_JxwAAAG4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-23 13:03:23
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-06-23 10:05:59
(5 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 09:47:06
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 05:47:01.403801 2026] [security2:error] [pid 4934:tid 4934] [client 37.27.110.171:59968] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fractalsky.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fractalsky.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpWFcdbDRqZPZg2xs20ygAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 08:44:58
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 04:44:54.020468 2026] [security2:error] [pid 21246:tid 21246] [client 37.27.110.171:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rodrigoaldecoa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rodrigoaldecoa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpHhplUJ1OUgYrMwUAM3wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-06-23 08:14:19
(5 days ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 05:06:26
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 01:06:18.859882 2026] [security2:error] [pid 18399:tid 18399] [client 37.27.110.171:54586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||twincitytn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "twincitytn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajoUSr7nmZQXvU8wc3qGtwAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ddw
2026-06-22 14:06:29
(6 days ago)
WordPress XMLRPC.PHP Access Attempt.
Hacking
Web App Attack
🇩🇪
4server
2026-06-22 11:09:56
(6 days ago)
[MonJun2213:09:51.2556722026][security2:error][pid1827430:tid1827527][client37.27.110.171:0]ModSecur ...
show more
[MonJun2213:09:51.2556722026][security2:error][pid1827430:tid1827527][client37.27.110.171:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mail.viveretrentino.it\"][uri\"/wp/xmlrpc.php\"][unique_id\"ajkX_xUVHgRsD6qTKKGUnwAAAQA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 15:57:27
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 11:57:19.355472 2026] [security2:error] [pid 1610:tid 1610] [client 37.27.110.171:56568] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||htu.modernsalessolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "htu.modernsalessolutions.com"] [uri "/wp-json/wp/v2/users/5"] [unique_id "ajVm3xRoKhiukJ_MeFJc3AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 14:58:37
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 10:58:30.797560 2026] [security2:error] [pid 19952:tid 19952] [client 37.27.110.171:55600] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||adlc18.mtalame.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adlc18.mtalame.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVZFpOMoVpcUF_EaU1xGgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-19 12:10:43
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 11:17:08
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.110.171 (c2.suncomet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:17:00.552558 2026] [security2:error] [pid 1527:tid 1527] [client 37.27.110.171:51584] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gvimmobilier.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gvimmobilier.com"] [uri "/wp-json/wp/v2/users/10"] [unique_id "ajUlLJFHfV7VZYYWQiSYNAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack