🇺🇸
TPI-Abuse
2026-06-14 09:58:54
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 05:58:48.807781 2026] [security2:error] [pid 11971:tid 11971] [client 38.211.129.26:53368] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.blaslandsporthorses.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.blaslandsporthorses.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai57WATlEoPTbqE9yVA2JgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
R.G.
2026-06-13 12:46:11
(6 days ago)
(WPLOGINorWHATEVER) Get lost please 38.211.129.26 (BR/Brazil/-): 7 in the last 600 secs; Ports: *; D ...
show more
(WPLOGINorWHATEVER) Get lost please 38.211.129.26 (BR/Brazil/-): 7 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 12:38:42
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:38:35.619208 2026] [security2:error] [pid 14470:tid 14470] [client 38.211.129.26:37730] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||savingspools.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "savingspools.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai1PS3UL96To89KMvQUbOQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 10:21:28
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:21:24.637724 2026] [security2:error] [pid 18383:tid 18425] [client 38.211.129.26:60642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.busybeerestaurant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.busybeerestaurant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai0vJDM_DWTo8cF6KZ8awQAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-13 05:44:17
(6 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-13 00:53:07
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 20:53:00.585679 2026] [security2:error] [pid 16543:tid 16543] [client 38.211.129.26:43110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fiasdesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fiasdesigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiyp7Kt7JsJjaM6fAL-r-AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-05-21 01:54:23
(4 weeks ago)
Excessive 404/403 errors
Brute-Force
2026-05-20 12:59:54
(4 weeks ago)
[redacted] 38.211.129.26 - - [20/May/2026:14:59:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 38.211.129.26 - - [20/May/2026:14:59:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
[redacted] 38.211.129.26 - - [20/May/2026:14:59:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0"
[redacted] 38.211.129.26 - - [20/May/2026:14:59:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
[redacted] 38.211.129.26 - - [20/May/2026:14:59:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0"
[redacted] 38.211.129.26 - - [20/May/2026:14:59:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 1199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"
[redacted] 38.211.129.26 - - [20/May/2026:14:59:51
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 11:48:25
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 07:48:19.054744 2026] [security2:error] [pid 28567:tid 28567] [client 38.211.129.26:40022] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.levijoneslegal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.levijoneslegal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag2fgzBQGAX2D03GNdsjHQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-05-20 10:52:11
(4 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 02:17:32
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 22:17:28.980130 2026] [security2:error] [pid 28286:tid 28286] [client 38.211.129.26:60752] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.talkingmess.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.talkingmess.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag0ZuMafexELJ_luBw39mAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
R.G.
2026-05-20 00:09:05
(4 weeks ago)
(XMLRPCorWHATEVER) Get lost please 38.211.129.26 (US/United States/-): 3 in the last 900 secs; Ports ...
show more
(XMLRPCorWHATEVER) Get lost please 38.211.129.26 (US/United States/-): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 17:51:26
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 13:51:19.357166 2026] [security2:error] [pid 30917:tid 30917] [client 38.211.129.26:34460] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.konahawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.konahawaiirealty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agyjFwZ6ckWjfk_81P4zWAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 08:18:10
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 04:18:06.085433 2026] [security2:error] [pid 13100:tid 13100] [client 38.211.129.26:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cloudex.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cloudex.click"] [uri "/wp-json/wp/v2/users"] [unique_id "agwcvpilD7cDGdkUB5tMYQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 01:48:55
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 38.211.129.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 21:48:50.611267 2026] [security2:error] [pid 13933:tid 13933] [client 38.211.129.26:47180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.drjasonkolber.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.drjasonkolber.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agvBgn3vhn9VgHh-d5VrlAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack