🇪🇸
librebit
2026-09-28 13:57:13
(1 day ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-25 15:08:51
(4 days ago)
Brute force
Brute-Force
🇦🇺
paulshipley.com.au
2026-09-22 15:35:11
(6 days ago)
[Wed Sep 23 01:35:10.175853 2026] [security2:error] [pid 262806] [client 77.220.194.222:65185] [clie ...
show more
[Wed Sep 23 01:35:10.175853 2026] [security2:error] [pid 262806] [client 77.220.194.222:65185] [client 77.220.194.222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "arKgLsQAvJbblSoKNK8gQQAAABE"]
...
show less
Web App Attack
🇩🇪
LRob
2026-09-07 00:59:58
(3 weeks ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15 | 2026-09-07 00:59 UTC
show less
Hacking
Web App Attack
🇩🇪
stinpriza
2026-06-23 22:00:50
(3 months ago)
Web App Attack
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 22:35:52
(3 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-12 16:45:16
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 12:45:10.680037 2026] [security2:error] [pid 14190:tid 14270] [client 77.220.194.222:38205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||trejbal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "trejbal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiw3lqPYDa6QheHY2lXVZgAAAc4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 19:39:51
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:39:43.390360 2026] [security2:error] [pid 12310:tid 12310] [client 77.220.194.222:64347] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||opere.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "opere.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aim9f6otNHaY44rKD7cbqgAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-09 15:35:08
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 21:28:16
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 17:28:12.672108 2026] [security2:error] [pid 18651:tid 18651] [client 77.220.194.222:65263] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gotdt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gotdt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiXibLoabjXkFVmbJYkkpwAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 01:57:33
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 21:57:30.501235 2026] [security2:error] [pid 18049:tid 18049] [client 77.220.194.222:52019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thebumans.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thebumans.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahjyioh8PbRy4KARJ7W1yAAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 12:01:41
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 08:01:34.350190 2026] [security2:error] [pid 25370:tid 25370] [client 77.220.194.222:35557] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||menzelassociates.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "menzelassociates.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahQ6Hs1sQgxy0HPLeW3MCQAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-05-13 04:27:44
(4 months ago)
WordPress login attempt
Brute-Force
🇺🇸
nyt
2026-05-10 11:27:56
(4 months ago)
WP User Enumeration, WP Author Enumeration
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 15:59:32
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.194.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 10:59:26.886451 2026] [security2:error] [pid 5770:tid 5770] [client 77.220.194.222:38631] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talentstar2025.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar2025.com"] [uri "/wp-json/wp/v2/users/3"] [unique_id "aXJJXv2sivhKnd8IF8FHAAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
