🇺🇸
TPI-Abuse
2026-06-28 17:43:20
(44 minutes ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 13:43:12.874986 2026] [security2:error] [pid 2022:tid 2022] [client 37.27.129.172:55256] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||renjunews.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "renjunews.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akFdMARech8hHqv3UipqJAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 17:15:54
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 13:15:49.055082 2026] [security2:error] [pid 9063:tid 9063] [client 37.27.129.172:49264] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mytapt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mytapt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akFWxZsd0li-JcOCdz58wQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 16:36:12
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 12:36:05.943165 2026] [security2:error] [pid 13098:tid 13098] [client 37.27.129.172:40458] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wsffjatc.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wsffjatc.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akFNdeLYW4Bx8iTHRLu4hwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 15:55:39
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 11:55:32.625655 2026] [security2:error] [pid 20782:tid 20782] [client 37.27.129.172:53390] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artbytracyjane.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artbytracyjane.com"] [uri "/wp-json/wp/v2/users/3"] [unique_id "akFD9Py0qvKKv_UGiwDtSgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 15:14:48
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 11:14:44.500877 2026] [security2:error] [pid 24870:tid 24870] [client 37.27.129.172:36622] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||puckerbuttbikinis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puckerbuttbikinis.com"] [uri "/wp-json/wp/v2/users/8"] [unique_id "akE6ZKqBkzRJfPvs0DNrNwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-28 15:03:35
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 14:06:10
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 10:06:05.512329 2026] [security2:error] [pid 25942:tid 25942] [client 37.27.129.172:47830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgesmarina.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgesmarina.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akEqTbr2n6NFJVjCUwzG1wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 12:42:44
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 08:42:39.651023 2026] [security2:error] [pid 15131:tid 15131] [client 37.27.129.172:25034] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vespaitaliancafe.matteozacchino.dev|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vespaitaliancafe.matteozacchino.dev"] [uri "/wp-json/wp/v2/users/4"] [unique_id "akEWvxyUwXk44-tNQ1hRPAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 12:15:30
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 08:15:22.773399 2026] [security2:error] [pid 29206:tid 29206] [client 37.27.129.172:19002] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theroyalhouseofelohim.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theroyalhouseofelohim.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akEQWpNzcUbhOFC6hQg_VgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 11:29:10
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 07:29:02.035342 2026] [security2:error] [pid 25778:tid 25778] [client 37.27.129.172:54078] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||avalderlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "avalderlaw.com"] [uri "/wp-json/wp/v2/users/7"] [unique_id "akEFfnRW45vuk6Q3kx8AwAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-28 08:33:29
(9 hours ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 37.27.129.172 (FI/Finland/static.172.129.27.3 ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 37.27.129.172 (FI/Finland/static.172.129.27.37.clients.your-server.de): 1 in the last 3600 secs (0-196)
show less
Hacking
🇲🇽
octageeks.com
2026-06-28 04:07:42
(14 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
tecnicorioja
2026-06-27 22:01:02
(20 hours ago)
wp-login attack [27/Jun/2026:18:35:58
Brute-Force
Web App Attack
🇫🇮
stinpriza
2026-06-27 20:38:57
(21 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 08:12:00
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 37.27.129.172 (static.172.129.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 04:11:53.557560 2026] [security2:error] [pid 31869:tid 31892] [client 37.27.129.172:13978] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||greaternorthmiamihistory.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greaternorthmiamihistory.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj-FyfNW-hn6fLrzr4lF-QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack