🇺🇸
TPI-Abuse
2026-05-01 16:11:35
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co. ...
show more
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 12:11:30.393576 2026] [security2:error] [pid 4675:tid 4675] [client 49.249.229.42:49342] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||protexiasecure.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "protexiasecure.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afTQsupOYFeq8n5dBfWgeAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-04-21 08:42:24
(1 month ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/static-42.229.249.49-tataidc.co.in
Web App Attack
🇩🇪
rh24
2026-04-21 04:35:06
(1 month ago)
(wordpress) Failed wordpress login from 49.249.229.42 (IN/India/static-42.229.249.49-tataidc.co.in): ...
show more
(wordpress) Failed wordpress login from 49.249.229.42 (IN/India/static-42.229.249.49-tataidc.co.in): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-04-21 04:26:30
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co. ...
show more
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 00:26:24.165345 2026] [security2:error] [pid 800268:tid 800268] [client 49.249.229.42:58654] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||webersource.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "webersource.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeb8cMgN7Dr1JwIFefFhwgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-04-15 17:47:01
(1 month ago)
Web App Attack
Web App Attack
🇩🇪
4server
2026-04-15 15:43:33
(1 month ago)
[WedApr1517:43:27.7203362026][security2:error][pid3665873:tid3665972][client49.249.229.42:0]ModSecur ...
show more
[WedApr1517:43:27.7203362026][security2:error][pid3665873:tid3665972][client49.249.229.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"148\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mjgold.ch\"][uri\"/xmlrpc.php\"][unique_id\"ad-yHyihYX-vRgX5FTusdwAAAAY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
n2nguyenn2nguyen
2026-04-11 12:55:47
(2 months ago)
Blocked by YFC Security on https://brixzly.com — type: xmlrpc_attempts
Brute-Force
Web App Attack
2026-04-11 12:51:02
(2 months ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-10 15:12:23
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co. ...
show more
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 11:12:18.971551 2026] [security2:error] [pid 520551:tid 520551] [client 49.249.229.42:48080] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||spacebooger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "spacebooger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adkTUjMdklAHMaQnpJwvggAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-04-10 11:18:08
(2 months ago)
(wordpress) Failed wordpress login from 49.249.229.42 (IN/India/static-42.229.249.49-tataidc.co.in)
Brute-Force
🇬🇧
AvonleaConsulting
2026-04-10 07:44:06
(2 months ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
2026-04-07 13:01:33
(2 months ago)
(wordpress) Failed wordpress login from 49.249.229.42 (IN/India/static-42.229.249.49-tataidc.co.in)
Brute-Force
🇺🇸
TPI-Abuse
2026-04-07 10:46:53
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co. ...
show more
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 06:46:45.068046 2026] [security2:error] [pid 993324:tid 993324] [client 49.249.229.42:51828] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||servecon.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "servecon.net"] [uri "/wp-json/wp/v2/users"] [unique_id "adTglZIzpiTAeyfU7iXYOQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-04-06 13:48:13
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 10:14:27
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co. ...
show more
(mod_security) mod_security (id:225170) triggered by 49.249.229.42 (static-42.229.249.49-tataidc.co.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 06:14:20.407841 2026] [security2:error] [pid 1616:tid 1628] [client 49.249.229.42:50512] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||killasgarage.bike|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "killasgarage.bike"] [uri "/wp-json/wp/v2/users"] [unique_id "ac-S_DtBevaweRua2r1SlwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack