🇫🇷
LRob
2026-11-14 08:47:12
UTC ·
(8 hours ago)
Web page flood (L7) | path: /blog/actu-lrob/nouvelle-annee-nouvelle-ere-bienvenue-sur-le-portail-lrob/, /en/blog/emails-6-preventive-tips-to-never-receive-spam/, /blog/securite-wordpress/votre-site-wordpress-est-vulnerable/ (+7 more)
DDoS Attack
Web App Attack
2026-11-12 12:35:15
UTC ·
(2 days ago)
IP matched detection query Too many uniq urls without image.
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-11 01:06:02
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:05:58.651537 2026] [security2:error] [pid 32118:tid 32144] [client 83.142.53.79:52529] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:05:58.651537 2026] [security2:error] [pid 32118:tid 32144] [client 83.142.53.79:52529] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thomas.kiehnefamily.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thomas.kiehnefamily.us"] [uri "/blog/1.1"] [unique_id "avO_dvHB9b0wg0Vo6MYu_wAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:35:03
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:34:54.545426 2026] [security2:error] [pid 14036:tid 14036] [client 83.142.53.79:15575] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:34:54.545426 2026] [security2:error] [pid 14036:tid 14036] [client 83.142.53.79:15575] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.disio.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.disio.com"] [uri "/roseville-review-2/over-400-pastors-and-ceremony-leadership-to-resign/"] [unique_id "avGFrnVhmC4WZElROTnq6QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-09 05:01:17
UTC ·
(5 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-10-29 00:03:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:03:28.191412 2026] [security2:error] [pid 24741:tid 24910] [client 83.142.53.79:12611] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:03:28.191412 2026] [security2:error] [pid 24741:tid 24910] [client 83.142.53.79:12611] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntmfnewsrahman5.html"] [unique_id "auKNUG0RLXAHj0B5DrOUiAAAAcI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-26 20:55:30
UTC ·
(1 month ago)
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack t ...
show more
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack tools, blocked on sight. Please check the machine behind it. | method: GET | path: /wp-login.php | 2026-09-26 20:55 UTC
show less
Web App Attack
Hacking
🇨🇿
ptlab
2026-04-21 02:46:57
UTC ·
(6 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
nationaleventpros.com
2026-04-17 10:39:33
UTC ·
(6 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-04-12 04:06:34
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 00:06:26.315274 2026] [security2:error] [pid 4122074:tid 4122074] [client 83.142.53.79:14725] ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 00:06:26.315274 2026] [security2:error] [pid 4122074:tid 4122074] [client 83.142.53.79:14725] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kunzteam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kunzteam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adsaQiAu2Yi9Lag8f3PLKAAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-04-11 16:29:15
UTC ·
(7 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
GB/United Kingdom/-
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 14:34:16
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 09:34:11.731913 2026] [security2:error] [pid 10097:tid 10097] [client 83.142.53.79:31083] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 09:34:11.731913 2026] [security2:error] [pid 10097:tid 10097] [client 83.142.53.79:31083] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||applemaccomputerconsulting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "applemaccomputerconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXI1Y-NRNMEgDqIOu4U8ggAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-26 15:43:53
UTC ·
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 26 10:43:49.963314 2025] [security2:error] [pid 23226:tid 23226] [client 83.142.53.79:40063] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.53.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 26 10:43:49.963314 2025] [security2:error] [pid 23226:tid 23226] [client 83.142.53.79:40063] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||prcomputersolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prcomputersolutions.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU6tNb4iL1dqwJXsFMA5bQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-06-09 04:45:05
UTC ·
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇭
backslash
2025-01-24 10:05:15
UTC ·
(1 year ago)
DDoS Attack
