🇺🇸
TPI-Abuse
2026-10-22 13:56:36
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum. ...
show more
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:56:30.757466 2026] [security2:error] [pid 29689:tid 29689] [client 76.37.208.85:31742] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bundrenfarmstn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bundrenfarmstn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atoWDiwDPTCzKW7XcfAcFgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
Jova
2026-10-22 13:00:51
(1 day ago)
WordPress user enumeration: 5 requests.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:00:18
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum. ...
show more
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:00:11.697745 2026] [security2:error] [pid 4771:tid 4771] [client 76.37.208.85:31951] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||marinestorage.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marinestorage.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atkZy-f1G7--x-bERGC8_wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
solution.it
2026-10-20 22:40:05
(2 days ago)
[Wed Oct 21 00:40:05.669196 2026] [php7:error] [pid 3801304:tid 3801304] [client 76.37.208.85:30113] ...
show more
[Wed Oct 21 00:40:05.669196 2026] [php7:error] [pid 3801304:tid 3801304] [client 76.37.208.85:30113] script '/var/www/html/www.craccaaltesoro.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇮🇹
LTM
2026-10-19 06:20:01
(4 days ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 10:46:48
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum. ...
show more
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:46:43.131460 2026] [security2:error] [pid 17390:tid 17390] [client 76.37.208.85:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||avaliantlife.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "avaliantlife.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNSEx8OX9jadDJFDoYy7gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-10-16 22:01:13
(6 days ago)
Detected by WP fail2ban
2026-10-17T00:01:12.467814+02:00 wordpress: Authentication attempt from 76.3 ...
show more
Detected by WP fail2ban
2026-10-17T00:01:12.467814+02:00 wordpress: Authentication attempt from 76.37.208.85
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 07:22:00
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum. ...
show more
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:21:52.828945 2026] [security2:error] [pid 19899:tid 19899] [client 76.37.208.85:31794] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||spacebooger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "spacebooger.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atB_EA3Oi6bl7gX3eqfapQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-15 00:07:44
(1 week ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 19:48:07
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum. ...
show more
(mod_security) mod_security (id:225170) triggered by 76.37.208.85 (syn-076-037-208-085.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:48:04.521509 2026] [security2:error] [pid 1482:tid 1482] [client 76.37.208.85:29746] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||annpietrangelo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "annpietrangelo.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "as_cdAhx-FbGQPsqbRnXBQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-10-14 13:15:48
(1 week ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack