🇺🇸
TPI-Abuse
2026-11-12 14:46:41
UTC ·
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 86.120.247.92 (86-120-247-92.rdsnet.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:46:32.079097 2026] [security2:error] [pid 22719:tid 22719] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 86.120.247.92 (86-120-247-92.rdsnet.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:46:32.079097 2026] [security2:error] [pid 22719:tid 22719] [client 86.120.247.92:44864] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||acarsubscription.com.apexhumanoidrobots.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "acarsubscription.com.apexhumanoidrobots.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "avXRSOwEcIFhQoVXNRqTJgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-11 07:35:34
UTC ·
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
🇩🇪
LRob
2026-11-10 18:15:38
UTC ·
(2 days ago)
Web exploit attempt | method: GET | path: /feed/json/, /, /wp-json/buddypress/v1/members (+1 more) | query: author=1&_fields=slug, author=2&_fields=slug, _fields=user_login&per_page=100&page=1 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK ...
show more
Web exploit attempt | method: GET | path: /feed/json/, /, /wp-json/buddypress/v1/members (+1 more) | query: author=1&_fields=slug, author=2&_fields=slug, _fields=user_login&per_page=100&page=1 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
🇩🇪
YF
2026-11-10 17:00:25
UTC ·
(2 days ago)
WordPress author enumeration
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 10:02:50
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 86.120.247.92 (86-120-247-92.rdsnet.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:02:44.023643 2026] [security2:error] [pid 3697:tid 3697] [client 86 ...
show more
(mod_security) mod_security (id:225170) triggered by 86.120.247.92 (86-120-247-92.rdsnet.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:02:44.023643 2026] [security2:error] [pid 3697:tid 3697] [client 86.120.247.92:43606] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blaslandsporthorses.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blaslandsporthorses.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "avLrxEfhCN46gZi103ycTAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:30:58
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 86.120.247.92 (86-120-247-92.rdsnet.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:30:51.607032 2026] [security2:error] [pid 9094:tid 9094] [client 86 ...
show more
(mod_security) mod_security (id:225170) triggered by 86.120.247.92 (86-120-247-92.rdsnet.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:30:51.607032 2026] [security2:error] [pid 9094:tid 9094] [client 86.120.247.92:41786] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wpcoc.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wpcoc.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au4Au5BzBxxlV0TXTFcWgwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-11-06 11:56:19
UTC ·
(6 days ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T11:56:19Z.
Bad Web Bot
🇮🇹
LTM
2026-10-30 07:20:01
UTC ·
(2 weeks ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇩🇪
Blexyel
2026-10-29 11:52:14
UTC ·
(2 weeks ago)
86.120.247.92 - - [29/Oct/2026:12:52:13 +0100] "GET /wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
Brute-Force
Web App Attack
🇺🇸
鬼影233
2026-03-24 00:26:56
UTC ·
(7 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3
Bad Web Bot
2026-03-23 01:01:01
UTC ·
(7 months ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
🇩🇪
Ba-Yu
2023-07-25 19:25:28
UTC ·
(3 years ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
🇺🇸
SleepyHosting
2023-04-04 12:53:42
UTC ·
(3 years ago)
(mod_security) mod_security (id:400010) triggered by 86.120.247.92 (RO/Romania/86-120-247-92.rdsnet.ro): 5 in the last 3600 secs
Brute-Force
🇪🇸
10dencehispahard SL
2023-04-01 08:26:33
UTC ·
(3 years ago)
Unauthorized login attempts [{'wordpress-xmlrpc', 'wordpress'}]
Brute-Force
Web App Attack
🇩🇪
niceshops.com
2023-04-01 05:38:44
UTC ·
(3 years ago)
Web Attack (Apr 23 07:38:42 ScriptKiddie: request for /wp-login.php )
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
