🇺🇸
TPI-Abuse
2026-06-24 14:41:15
(20 minutes ago)
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 10:41:10.922367 2026] [security2:error] [pid 13295:tid 13295] [client 39.98.55.157:35534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.linhsbridal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.linhsbridal.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ajvshq9aUinO4l7VVFzP3wAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
AlexEventfahrtenIPDB
2026-06-24 14:04:35
(57 minutes ago)
[Wed Jun 24 16:04:33.150612 2026] [authz_core:error] [pid 501730:tid 501730] [client 39.98.55.157:50 ...
show more
[Wed Jun 24 16:04:33.150612 2026] [authz_core:error] [pid 501730:tid 501730] [client 39.98.55.157:50184] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php
[Wed Jun 24 16:04:35.233390 2026] [authz_core:error] [pid 660817:tid 660817] [client 39.98.55.157:50200] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://powerstar.spdns.de/wp-login.php
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 13:39:05
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 09:38:58.689108 2026] [security2:error] [pid 28129:tid 28129] [client 39.98.55.157:59054] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||indyham.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "indyham.com"] [uri "/wp-json/wp/v2/users/4"] [unique_id "ajvd8naB8JGz61uT9PHd3AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
spamverify.com
2026-06-24 12:35:45
(2 hours ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-24 11:44:09
(3 hours ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 39.98.55.157 (CN/China/-): 1 in the last 3600 ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 39.98.55.157 (CN/China/-): 1 in the last 3600 secs (0-196)
show less
Hacking
🇫🇷
tecnicorioja
2026-05-26 22:00:34
(4 weeks ago)
wp-login attack [26/May/2026:08:03:39
Brute-Force
Web App Attack
🇩🇪
ger-stg-sifi1
2026-05-26 07:47:29
(4 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
LRob.fr
2026-05-26 04:45:12
(4 weeks ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 03:40:14
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 23:40:07.068436 2026] [security2:error] [pid 28480:tid 28480] [client 39.98.55.157:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||avaliantlife.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "avaliantlife.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahUWF_QgH_KNiVt8Ru00EAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-05-26 03:39:27
(4 weeks ago)
39.98.55.157 - - [26/May/2026:05:39:27 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ...
show more
39.98.55.157 - - [26/May/2026:05:39:27 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇨🇿
ptlab
2026-05-26 00:45:16
(4 weeks ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇫🇷
masterguru
2026-05-26 00:12:45
(4 weeks ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 39.98.55.157 (CN/China/-): 1 in the last 3600 ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 39.98.55.157 (CN/China/-): 1 in the last 3600 secs (0-193)
show less
Hacking
🇫🇷
masterguru
2026-05-14 08:09:29
(1 month ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 39.98.55.157 (CN/China/-): 1 in the last 3600 ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 39.98.55.157 (CN/China/-): 1 in the last 3600 secs (0-196)
show less
Hacking
🇺🇸
TPI-Abuse
2026-05-14 06:04:52
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 02:04:48.064509 2026] [security2:error] [pid 19348:tid 19348] [client 39.98.55.157:38496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rame-int.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rame-int.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agVmAJgQ4VU5q79aEO7l_AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 22:54:16
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 39.98.55.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 18:54:12.517569 2026] [security2:error] [pid 25237:tid 25237] [client 39.98.55.157:53220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||parastesh.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "parastesh.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agUBFBJ8p0qeP2zJp38hNQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack