🇬🇧
Steptoe
2026-01-20 19:21:59
(4 months ago)
GET /wp-login.php
POST /xmlrpc.php
GET /wp-json/wp/v2/users
Hostname: apx97.internetdsl.tpnet.p ...
show more
GET /wp-login.php
POST /xmlrpc.php
GET /wp-json/wp/v2/users
Hostname: apx97.internetdsl.tpnet.pl
UAs:
Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/119.0.0.0+Safari/537.36
Apache-HttpClient/4.5.13+(Java/11.0.29)
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-01-18 22:52:41
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 17:52:37.376038 2026] [security2:error] [pid 6861:tid 6861] [client 83.17.157.97:42540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theproducers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theproducers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW1kNdAW1soewx_9JTioqQAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-18 22:00:17
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 17:00:12.484911 2026] [security2:error] [pid 18862:tid 18862] [client 83.17.157.97:36874] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||billymitchell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "billymitchell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW1X7FiFrZ7yf9q78vBVpQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-18 21:38:02
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 16:37:56.436922 2026] [security2:error] [pid 7357:tid 7357] [client 83.17.157.97:52734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||madbanana.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "madbanana.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW1StKZa738S0Ql-DXNG_AAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-18 19:06:58
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 14:06:54.830797 2026] [security2:error] [pid 25632:tid 25632] [client 83.17.157.97:45256] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||assheton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "assheton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW0vTsmzxNDZq4QegwCw-wAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-18 16:14:31
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 11:14:23.737380 2026] [security2:error] [pid 14308:tid 14308] [client 83.17.157.97:49394] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cobbwebb.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cobbwebb.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aW0G36uU6Xy-EsoOuJedRgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-13 15:32:41
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 10:32:35.089644 2026] [security2:error] [pid 23154:tid 23154] [client 83.17.157.97:45872] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aWZlk4ZUZplwblBNI58PjgAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-08 09:42:51
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 04:42:43.771291 2026] [security2:error] [pid 32696:tid 32740] [client 83.17.157.97:43258] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kandooo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kandooo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aV98E52mbArATPCEVuX8HAAAAM0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-30 16:27:27
(5 months ago)
83.17.157.97 - - [30/Dec/2025:17:27:24 +0100] "POST /xmlrpc.php HTTP/1.1" 200 181
83.17.157.97 - - [ ...
show more
83.17.157.97 - - [30/Dec/2025:17:27:24 +0100] "POST /xmlrpc.php HTTP/1.1" 200 181
83.17.157.97 - - [30/Dec/2025:17:27:25 +0100] "POST /xmlrpc.php HTTP/1.1" 200 418
...
show less
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-30 12:24:10
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 07:24:03.442021 2025] [security2:error] [pid 30281:tid 30281] [client 83.17.157.97:60162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcbrearty.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcbrearty.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aVPEYwI18tyMihySVg1vhgAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-30 11:40:11
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 83.17.157.97 (apx97.internetdsl.tpnet.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 06:40:07.589479 2025] [security2:error] [pid 25907:tid 25978] [client 83.17.157.97:59796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||peimbert.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peimbert.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aVO6FwD-FPzRdUUNEd1QXwAAAok"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack