๐ฎ๐ช
Coolnagour
2026-08-26 13:29:15
(4 hours ago)
http-probing: /wp-json/buddypress/v1/members
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 13:13:52
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum ...
show more
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 09:13:45.526625 2026] [security2:error] [pid 51376:tid 51385] [client 74.74.162.204:49622] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hmpdecors.com.oplconnect.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hmpdecors.com.oplconnect.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao7midhqs7pLkRqv5tsdMAAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 12:42:05
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum ...
show more
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 08:41:58.378975 2026] [security2:error] [pid 32381:tid 32381] [client 74.74.162.204:40718] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||weddingmusicguitar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "weddingmusicguitar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao7fFulPgZjE1o_CwaMfKgAAAJI"], referer: https://weddingmusicguitar.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 10:41:41
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum ...
show more
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:41:35.383157 2026] [security2:error] [pid 21774:tid 21774] [client 74.74.162.204:40914] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||davidharrisgriffith.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "davidharrisgriffith.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ao7C38zTFa0QO-E-eNlUAQAAAFs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 10:24:31
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum ...
show more
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:24:23.658816 2026] [security2:error] [pid 2820:tid 2820] [client 74.74.162.204:42298] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talentstar2025.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar2025.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao6-13HHegckpZ35FrCZdQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 09:53:06
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum ...
show more
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:52:58.848928 2026] [security2:error] [pid 30338:tid 30338] [client 74.74.162.204:43644] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||velocitymech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "velocitymech.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao63elYKzbK2u7bakcPvmAAAABo"], referer: https://velocitymech.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-08-26 09:09:00
(9 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐จ๐ญ
4server
2026-08-26 08:39:45
(9 hours ago)
[WedAug2610:39:39.3203262026][security2:error][pid3789842:tid3790183][client74.74.162.204:0]ModSecur ...
show more
[WedAug2610:39:39.3203262026][security2:error][pid3789842:tid3790183][client74.74.162.204:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"annunci-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"ao6mS7XqfXBE34hCIB329gAAARQ\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 08:16:20
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum ...
show more
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 04:16:12.826955 2026] [security2:error] [pid 31119:tid 31119] [client 74.74.162.204:48668] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eduempowermentsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eduempowermentsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao6gzLT3uxeQkl98fO-OigAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 08:00:53
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum ...
show more
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 04:00:48.735352 2026] [security2:error] [pid 6986:tid 6986] [client 74.74.162.204:43118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||radicalchange.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "radicalchange.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ao6dMPjLrXqrTJOdn_jgwQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 07:24:08
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum ...
show more
(mod_security) mod_security (id:225170) triggered by 74.74.162.204 (syn-074-074-162-204.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 03:24:01.642498 2026] [security2:error] [pid 2798:tid 2798] [client 74.74.162.204:32962] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||desarrollosdecolima.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desarrollosdecolima.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao6UkXqOaHB-1gpZIP__EwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
barbarella
2026-08-26 05:59:43
(12 hours ago)
Multiple (2) times attack on https port 443: unauthorized access to Wordpress REST Api (GET /wp-json ...
show more
Multiple (2) times attack on https port 443: unauthorized access to Wordpress REST Api (GET /wp-json/ultimate-member/v1/users)
10:31:37 unauthorized access to Wordpress REST Api (GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug)
show less
Hacking
Web App Attack
๐ฉ๐ช
brechtr
2026-08-26 04:53:13
(13 hours ago)
[Press84-BanHammer] bad username โ Sourced from: www.langsvlaamsewegen.be โ Request: POST /wp-login. ...
show more
[Press84-BanHammer] bad username โ Sourced from: www.langsvlaamsewegen.be โ Request: POST /wp-login.php
show less
Brute-Force
๐ซ๐ท
masterguru
2026-08-26 04:33:00
(13 hours ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-196)
Hacking
๐ฒ๐ฝ
octageeks.com
2026-08-26 04:09:18
(14 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack