🇺🇸
TPI-Abuse
2026-06-13 23:02:51
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 19:02:43.204073 2026] [security2:error] [pid 485:tid 485] [client 47.128.160.60:56930] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cycontechnology.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cycontechnology.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3hk7cW_wheJhqWllYDowAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
KnightIndustries
2026-06-13 11:32:22
(3 days ago)
2026-06-13T13:32:18.677591+02:00 milkyway wordpress(learncryptography.pw)[3599404]: Authentication a ...
show more
2026-06-13T13:32:18.677591+02:00 milkyway wordpress(learncryptography.pw)[3599404]: Authentication attempt for unknown user user from 47.128.160.60
2026-06-13T13:32:20.911564+02:00 milkyway wordpress(learncryptography.pw)[3599424]: Authentication attempt for unknown user admin from 47.128.160.60
2026-06-13T13:32:21.534383+02:00 milkyway wordpress(learncryptography.pw)[3599422]: Authentication attempt for unknown user admin from 47.128.160.60
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 07:40:38
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:40:30.687975 2026] [security2:error] [pid 24410:tid 24410] [client 47.128.160.60:46402] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rwabutazafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rwabutazafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai0JboVMOM4GjSBRg62yjQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 09:38:26
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:38:21.912026 2026] [security2:error] [pid 22439:tid 22439] [client 47.128.160.60:36604] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.whodatnation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.whodatnation.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aivTjYVPUAWxZiEr1pN5NQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-11 22:33:15
(5 days ago)
Brute-Force
Web App Attack
🇩🇪
dbmwebdesign
2026-06-11 11:10:10
(5 days ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇫🇮
Rexikon
2026-06-11 04:22:04
(5 days ago)
47.128.160.60 - - [11/Jun/2026:06:21:59 +0200] "POST /wp-login.php HTTP/1.1" 200 15292 "-" "Mozilla/ ...
show more
47.128.160.60 - - [11/Jun/2026:06:21:59 +0200] "POST /wp-login.php HTTP/1.1" 200 15292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0"
47.128.160.60 - - [11/Jun/2026:06:21:59 +0200] "POST /wp-login.php HTTP/1.1" 200 15292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0"
47.128.160.60 - - [11/Jun/2026:06:22:01 +0200] "POST /wp-login.php HTTP/1.1" 200 15292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:42.0) Gecko/20100101 Firefox/42.0"
47.128.160.60 - - [11/Jun/2026:06:22:02 +0200] "POST /wp-login.php HTTP/1.1" 200 15292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
47.128.160.60 - - [11/Jun/2026:06:22:03 +0200] "POST /wp-login.php HTTP/1.1" 200 15292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0"
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 12:02:46
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 08:02:38.107675 2026] [security2:error] [pid 19919:tid 19919] [client 47.128.160.60:49380] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fiasdesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fiasdesigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ailSXkVWkcWsGbr9nQS6fgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 00:41:42
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:41:35.410928 2026] [security2:error] [pid 29135:tid 29135] [client 47.128.160.60:43674] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||imbrasacademic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "imbrasacademic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aidhPygbGpEKyAsoTkLLbAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 21:08:26
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 17:08:20.051214 2026] [security2:error] [pid 11872:tid 11872] [client 47.128.160.60:36226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.drgracetomastolentino.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.drgracetomastolentino.com"] [uri "/wordpress/wp-json/wp/v2/users"] [unique_id "aicvRFqaLg0tyuj58uE_6QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-08 20:00:05
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 04:58:24
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 00:58:20.689654 2026] [security2:error] [pid 14431:tid 14431] [client 47.128.160.60:38682] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.konahawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.konahawaiirealty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiZL7L063XcOGRj8WdSUbAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 04:16:46
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 00:16:42.850802 2026] [security2:error] [pid 25590:tid 25590] [client 47.128.160.60:36304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.breezentry.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.breezentry.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiZCKgW02_epQPqbjaDzLAAAADw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 14:40:17
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:40:01.946113 2026] [security2:error] [pid 25052:tid 25052] [client 47.128.160.60:49458] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tcomputerguy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tcomputerguy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiWCwTL-KILQzombwtU7zQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 13:37:17
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1 ...
show more
(mod_security) mod_security (id:225170) triggered by 47.128.160.60 (ec2-47-128-160-60.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:37:11.939138 2026] [security2:error] [pid 24151:tid 24151] [client 47.128.160.60:40522] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.digi-estudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.digi-estudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiV0B76G82EMNK3CbWT1bgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack