🇨🇦
DRI
2026-07-30 21:46:49
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 22:22:18
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 18:22:14.623983 2026] [security2:error] [pid 3455835:tid 3455835] [client 45.140.207.192:36929] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||robin5on.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "robin5on.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amKUFpy9bFc5J_vY7-URVwAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 21:46:45
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 17:46:41.644171 2026] [security2:error] [pid 1476280:tid 1476280] [client 45.140.207.192:39335] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amE6QU2MpQFf0TjdiSEDNQAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-18 23:51:00
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-15 07:07:47
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 03:07:42.967029 2026] [security2:error] [pid 23264:tid 23366] [client 45.140.207.192:42643] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ceol.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ceol.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alcxvu8zgfl12GMkFJeD6gAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-05-17 01:34:03
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
kjaerulff
2026-05-03 23:33:36
(4 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 18:20:34
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 14:20:26.697206 2026] [security2:error] [pid 21509:tid 21509] [client 45.140.207.192:33675] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aprilparks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aprilparks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae5XaqfvIHADbi-lJbc1hgAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-25 13:23:51
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 09:23:43.881089 2026] [security2:error] [pid 2045:tid 2045] [client 45.140.207.192:43117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fiberscribe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fiberscribe.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aezAX4DSCm7Vf_aHTdnUPQAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 03:30:09
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 23:30:03.358279 2026] [security2:error] [pid 25748:tid 25748] [client 45.140.207.192:18279] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||labelrecord.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "labelrecord.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aerju_SCoaLCxZJTQHIuiAAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-04-21 00:45:47
(4 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇨🇭
zynex
2026-04-17 08:55:48
(4 months ago)
URL Probing: /wp-login.php
Web App Attack
🇺🇸
[email protected]
2026-04-17 01:30:55
(4 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-04-17T01:30:55Z
Brute-Force
🇺🇸
[email protected]
2026-04-17 01:05:01
(4 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-04-17T01:05:01Z
Brute-Force
🇩🇪
MusicLibrary
2026-04-09 10:23:29
(4 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot