🇺🇸
TPI-Abuse
2026-09-04 21:50:52
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 17:50:44.422119 2026] [security2:error] [pid 3209:tid 3251] [client 45.148.233.97:62501] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cibernetic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cibernetic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aps9NMLJBHTX2mjZlZLtjAAAAcs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-03 05:28:17
(1 day ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-27 00:58:03
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 20:57:55.574355 2026] [security2:error] [pid 13414:tid 13414] [client 45.148.233.97:10041] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cephedanisman.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cephedanisman.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao-Lk_C1dBVPRNXSeT2oXQAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-13 05:59:36
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 01:59:29.411314 2026] [security2:error] [pid 2652083:tid 2652083] [client 45.148.233.97:25321] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nnrentacar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nnrentacar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "an1dQe44oH-ebpSuFcax8AAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-21 19:13:12
(1 month ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 19:44:31
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 15:44:24.864444 2026] [security2:error] [pid 10517:tid 10517] [client 45.148.233.97:30111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mprise.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mprise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alVAGJ2kSy_Zg84TuDT1NAAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-02 04:10:46
(2 months ago)
tilellit/wp-armour-ban
Hacking
🇫🇮
JimArchon72
2026-06-21 08:50:02
(2 months ago)
2026/06/21 08:47:19 "GET /wp-admin.php HTTP/1.1"
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:01:06
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:01:00.317627 2026] [security2:error] [pid 26582:tid 26582] [client 45.148.233.97:24643] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cruisingforsex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cruisingforsex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acp0DNiE0B5xg6SHzdWYggAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 15:08:22
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 11:08:06.744747 2026] [security2:error] [pid 9249:tid 9249] [client 45.148.233.97:33237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bpcompany.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bpcompany.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aclAVlkSjzTSsfGHawY4gAAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
applemooz
2026-03-28 07:24:47
(5 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 07:06:15
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 03:06:09.463736 2026] [security2:error] [pid 3346:tid 3431] [client 45.148.233.97:50253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||galenaproperties.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "galenaproperties.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acTa4Yb3XSmT9wcd7sE4nQAAAJg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:38:18
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:38:09.122989 2026] [security2:error] [pid 4558:tid 4558] [client 45.148.233.97:46083] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||3fabgals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "3fabgals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab0HcXWi2_nBXeMUF2DDDAAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 04:43:49
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.233.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 00:43:42.637659 2026] [security2:error] [pid 25751:tid 25751] [client 45.148.233.97:13959] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||prospecinspections.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prospecinspections.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abY4_u_DyY7GrkWlVISFpQAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-11 13:21:19
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
