🇳🇱
debestelapp
2026-06-04 13:15:03
(2 days ago)
Exploited Host
🇳🇱
Site.eu
2026-06-04 09:43:40
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-03 22:32:07
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 18:32:01.403264 2026] [security2:error] [pid 17430:tid 17442] [client 81.8.91.201:45000] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jofdt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jofdt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiCrYSzpsKzuewSy7nn4ngAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 16:33:42
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:33:36.005816 2026] [security2:error] [pid 28313:tid 28313] [client 81.8.91.201:36232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgesmarina.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgesmarina.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiBXYL9Qmnv2kGMMk9anwwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇱
Dolphi
2026-06-03 12:02:15
(3 days ago)
Excessive POST /wp-login.php requests
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-06-03 04:49:46
(4 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-02 09:29:24
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 05:29:17.004893 2026] [security2:error] [pid 29145:tid 29145] [client 81.8.91.201:42016] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.randymcelroy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.randymcelroy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah6ibMzKbCGC6p0LkqI6nQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-06-02 07:50:36
(4 days ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 81.8.91.201 (TR/Türkiye/mail1.safir.ne ...
show more
(wordpress-user-enum) Failed wordpress-user-enum trigger from 81.8.91.201 (TR/Türkiye/mail1.safir.net.tr): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-02 04:48:55
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 00:48:47.125454 2026] [security2:error] [pid 8644:tid 8644] [client 81.8.91.201:57004] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.wild-goose.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.wild-goose.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ah5gr-uPzZmKlL0SVDF45AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-06-02 00:55:23
(5 days ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-05-31 19:56:23
(6 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-05-30 23:50:18
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 19:50:07.836987 2026] [security2:error] [pid 17321:tid 17321] [client 81.8.91.201:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abdulhameeds.art|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abdulhameeds.art"] [uri "/ar/wp-json/wp/v2/users"] [unique_id "aht3rzwZW9RDPYN9f5eacAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-05-30 18:34:24
(1 week ago)
(modsecurity) srv103 ModSecurity 81.8.91.201 (TR/Turkey/mail1.safir.net.tr): 10 in the last 3600 sec ...
show more
(modsecurity) srv103 ModSecurity 81.8.91.201 (TR/Turkey/mail1.safir.net.tr): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇩🇪
F242
2026-05-30 08:20:41
(1 week ago)
Wordpress soft lock
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 00:36:30
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 81.8.91.201 (mail1.safir.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 20:36:23.472249 2026] [security2:error] [pid 18317:tid 18317] [client 81.8.91.201:60170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||superzilla.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "superzilla.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahoxB93XdB-Lc-7U2p1NNgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack