🇺🇸
TPI-Abuse
2026-10-12 15:17:59
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 67.103.5.132 (h-67-103-5-132.chcg.il.globalcapa ...
show more
(mod_security) mod_security (id:225170) triggered by 67.103.5.132 (h-67-103-5-132.chcg.il.globalcapacity.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:17:52.646482 2026] [security2:error] [pid 8445:tid 8445] [client 67.103.5.132:40541] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.genevainvestors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.genevainvestors.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asz6IAUAwdaAF1Ygoayf0QAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-10-12 07:58:12
(1 day ago)
67.103.5.132 - - [12/Oct/2026:01:58:12 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 ( ...
show more
67.103.5.132 - - [12/Oct/2026:01:58:12 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
...
show less
Web App Attack
2026-10-12 07:33:39
(1 day ago)
POST /xmlrpc.php HTTP/1.1
...
Brute-Force
🇺🇸
mnsf
2026-10-11 23:05:10
(2 days ago)
Abuse Detected (89)
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-10-11 22:13:35
(2 days ago)
67.103.5.132 - - [11/Oct/2026:22:12:54 +0000] "GET /?author=5 HTTP/1.1" 403 1197 "-" "Mozilla/5.0 (W ...
show more
67.103.5.132 - - [11/Oct/2026:22:12:54 +0000] "GET /?author=5 HTTP/1.1" 403 1197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "-" edge="67.103.5.132"
67.103.5.132 - - [11/Oct/2026:22:12:55 +0000] "GET /?author=6 HTTP/1.1" 403 1197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "-" edge="67.103.5.132"
67.103.5.132 - - [11/Oct/2026:22:13:02 +0000] "GET /?author=8 HTTP/1.1" 403 1197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "-" edge="67.103.5.132"
67.103.5.132 - - [11/Oct/2026:22:13:02 +0000] "GET /?author=9 HTTP/1.1" 403 1198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "-" edge="67.103.5.132"
67.103.5.132 - - [11/Oct/2026:22:13:04 +0000] "GET /?author=10 HTTP/1.1" 403 1198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "-" edge="67.103.5.132"
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-11 22:04:49
(2 days ago)
mareeshefford.com:443 67.103.5.132 - - [12/Oct/2026:09:04:48 +1100] "GET /?author=3 HTTP/1.1" 404 50 ...
show more
mareeshefford.com:443 67.103.5.132 - - [12/Oct/2026:09:04:48 +1100] "GET /?author=3 HTTP/1.1" 404 5007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
...
show less
Web App Attack
🇳🇱
maxxsense
2026-10-11 17:43:19
(2 days ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 67.103.5.132 (US/United States/h-67-10 ...
show more
(wordpress-user-enum) Failed wordpress-user-enum trigger from 67.103.5.132 (US/United States/h-67-103-5-132.chcg.il.globalcapacity.com)
show less
Brute-Force
🇺🇸
mnsf
2026-10-11 17:05:14
(2 days ago)
Abuse Detected (79)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-10-11 16:05:11
(2 days ago)
Abuse Detected (72)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 14:44:46
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 67.103.5.132 (h-67-103-5-132.chcg.il.globalcapa ...
show more
(mod_security) mod_security (id:225170) triggered by 67.103.5.132 (h-67-103-5-132.chcg.il.globalcapacity.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 10:44:38.080072 2026] [security2:error] [pid 3890:tid 3890] [client 67.103.5.132:33681] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||superzilla.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "superzilla.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asug1kXd7SHYyourIqcCigAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 14:28:28
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 67.103.5.132 (h-67-103-5-132.chcg.il.globalcapa ...
show more
(mod_security) mod_security (id:225170) triggered by 67.103.5.132 (h-67-103-5-132.chcg.il.globalcapacity.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 10:28:22.565500 2026] [security2:error] [pid 13776:tid 13776] [client 67.103.5.132:45879] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rockinr.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rockinr.org"] [uri "/wp-json/wp/v2/users"] [unique_id "asudBkQQ3LyUfZbDynAJsQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 13:18:23
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 67.103.5.132 (h-67-103-5-132.chcg.il.globalcapa ...
show more
(mod_security) mod_security (id:225170) triggered by 67.103.5.132 (h-67-103-5-132.chcg.il.globalcapacity.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 09:18:03.551240 2026] [security2:error] [pid 13048:tid 13048] [client 67.103.5.132:35277] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rblep.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rblep.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asuMi2uB6PlFXLFm-eQELAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-10 10:05:13
(3 days ago)
Abuse Detected (59)
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-10-10 04:52:15
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
mnsf
2026-10-10 04:05:22
(3 days ago)
Abuse Detected (52)
Brute-Force
Web App Attack
