🇺🇸
TPI-Abuse
2026-06-10 06:34:29
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 02:34:23.571004 2026] [security2:error] [pid 11467:tid 11467] [client 45.140.207.38:43753] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||luckydawgs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "luckydawgs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aikFb_TZQRgtxrXbCFKQKAAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tecnicorioja
2026-06-03 22:01:54
(6 days ago)
wp-login attack [03/Jun/2026:04:27:16
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 13:32:26
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 09:32:19.082131 2026] [security2:error] [pid 25820:tid 25820] [client 45.140.207.38:44757] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||moontouchmassage.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "moontouchmassage.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahw4Y-MnItcnUvlQHeGQIwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 10:40:48
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 06:40:40.913091 2026] [security2:error] [pid 13479:tid 13479] [client 45.140.207.38:46927] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blueworkdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blueworkdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahq-qInbn4MHzkxU_HjxrQAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 14:40:23
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:40:17.542282 2026] [security2:error] [pid 19258:tid 19258] [client 45.140.207.38:45405] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||badconsultingllc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "badconsultingllc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahRfUUG5voVv5h3sS8MUZwAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-05-19 13:44:52
(3 weeks ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇦🇺
oncord
2026-05-05 03:56:36
(1 month ago)
Form spam
Web Spam
🇩🇪
R.G.
2026-04-13 06:24:24
(1 month ago)
(XMLRPCorWHATEVER) Get lost please 45.140.207.38 (IL/Israel/-): 3 in the last 900 secs; Ports: *; Di ...
show more
(XMLRPCorWHATEVER) Get lost please 45.140.207.38 (IL/Israel/-): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
2026-03-22 11:04:41
(2 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
🇩🇪
MusicLibrary
2026-03-22 09:47:56
(2 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇮🇹
alessio loto
2026-03-19 13:41:31
(2 months ago)
WAF Detection: Security_Scanner_Blocked. AI Confirmed Attack Payload.
Bad Web Bot
🇩🇪
Bedios GmbH
2025-03-12 09:39:51
(1 year ago)
Wordpress hacking attempt
Web App Attack
🇬🇧
thetomtaylor.co.uk
2025-03-11 00:08:04
(1 year ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa01]
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-08-30 06:04:05
(1 year ago)
Web Spam
🇦🇺
Ross Wheatley
2022-10-09 21:02:31
(3 years ago)
GET /.git/config HTTP/1.1 404 5619 - Go-http-client/1.1
Brute-Force
Web App Attack