🇺🇸
TPI-Abuse
2026-06-10 05:21:15
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:21:07.396210 2026] [security2:error] [pid 2059:tid 2059] [client 87.106.130.236:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||english.cloudex.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "english.cloudex.click"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aij0QyHKkaiQgknN3nx1BAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 03:08:22
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 23:08:15.397037 2026] [security2:error] [pid 3871:tid 3871] [client 87.106.130.236:34770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||masalamadrid.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "masalamadrid.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aijVH307-m3XjhTVhPUCzQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
huginet
2026-06-10 01:08:27
(4 days ago)
87.106.130.236 - - [10/Jun/2026:03:08:22 +0200] "GET /wp-login.php HTTP/1.1" 200 9112 "-" "Mozilla/5 ...
show more
87.106.130.236 - - [10/Jun/2026:03:08:22 +0200] "GET /wp-login.php HTTP/1.1" 200 9112 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
87.106.130.236 - - [10/Jun/2026:03:08:26 +0200] "POST /wp-login.php HTTP/1.1" 200 9549 "https://centrum-eko-likvidace.org/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
...
show less
Web Spam
Blog Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 00:38:50
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:38:45.500756 2026] [security2:error] [pid 30914:tid 30914] [client 87.106.130.236:45638] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||celebritybikinigossip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "celebritybikinigossip.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiiyFbFVmOnyqRJSu0mhcgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 23:53:55
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 19:53:50.721316 2026] [security2:error] [pid 4124:tid 4124] [client 87.106.130.236:44090] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kerrywood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kerrywood.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiinjrmNFUaoRrunRJhlPQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
QT
2026-06-09 23:37:19
(4 days ago)
Unauthorised WordPress admin login attempted at 2026-06-10 09:37:18 +1000
Web App Attack
🇬🇧
spamverify.com
2026-06-09 23:30:40
(4 days ago)
Honeypot Hit: WordPress Users
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 23:22:37
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 19:22:33.753352 2026] [security2:error] [pid 17836:tid 17853] [client 87.106.130.236:53272] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cynosureinternetservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosureinternetservices.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiigOV01zlVUy_ZMjyJqmAAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-06-09 22:45:29
(4 days ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇫🇷
ELYAZ
2026-06-09 22:42:08
(4 days ago)
(y4) Failed scan -byebye- from 87.106.130.236 (DE/Germany/-): (CF_ENABLE)
Hacking
🇩🇪
LRob.fr
2026-06-09 22:15:03
(4 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 21:55:07
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:55:01.071118 2026] [security2:error] [pid 15065:tid 15065] [client 87.106.130.236:59946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||majesticsolutions.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "majesticsolutions.co"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiiLtZ37j3quqUwhmTT6XgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-09 21:29:26
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 20:45:54
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.130.236 (ip87-106-130-236.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:45:46.327181 2026] [security2:error] [pid 16006:tid 16012] [client 87.106.130.236:40710] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frannykingsmith.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frannykingsmith.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aih7eis1DFqDMxB0lkokgwAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-06-09 20:34:54
(4 days ago)
87.106.130.236 - - [09/Jun/2026:22:34:53 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Fed ...
show more
87.106.130.236 - - [09/Jun/2026:22:34:53 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force