🇩🇪
FeG Deutschland
2026-06-13 06:08:30
(29 minutes ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇩🇪
stinpriza
2026-06-13 05:21:06
(1 hour ago)
Web App Attack
Web App Attack
🇨🇿
lp
2026-06-13 04:55:06
(1 hour ago)
Email account brute force: 1 attempts were recorded from 87.106.217.70
2026-06-13T05:11:20+02:00 war ...
show more
Email account brute force: 1 attempts were recorded from 87.106.217.70
2026-06-13T05:11:20+02:00 warning: ip87-106-217-70.pbiaas.com[87.106.217.70]: SASL PLAIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-13 04:19:28
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:19:23.104714 2026] [security2:error] [pid 14067:tid 14067] [client 87.106.217.70:42788] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||phalanxemail.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "phalanxemail.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aizaS0IwzisLCpITb65jBgAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 02:09:54
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 22:09:49.293165 2026] [security2:error] [pid 23378:tid 23378] [client 87.106.217.70:38254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bb103.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bb103.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aiy77Y1eLpeWNSyY5Qh3jQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ph
2026-06-13 01:19:21
(5 hours ago)
Bad web bot attempting to run wp-json on non-WP site
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 23:32:18
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 19:32:11.268517 2026] [security2:error] [pid 31227:tid 31227] [client 87.106.217.70:40706] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brainstormer.soy|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brainstormer.soy"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiyW-0aM8rn0zCMlUkLmYAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 20:47:32
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 16:47:25.559614 2026] [security2:error] [pid 17043:tid 17043] [client 87.106.217.70:59652] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||support.leonardodecaprio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "support.leonardodecaprio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixwXW8GLRVezmsuerA-xgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 19:54:43
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 15:54:38.919218 2026] [security2:error] [pid 20643:tid 20643] [client 87.106.217.70:54914] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||johncyphers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "johncyphers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixj_qtG8DboeJFTjntQXQAAAAc"], referer: https://johncyphers.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 19:33:19
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 15:33:15.225929 2026] [security2:error] [pid 19870:tid 19880] [client 87.106.217.70:42734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||104ventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "104ventures.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixe-w24Y33zc7zbSXeEHgAAAAE"], referer: https://104ventures.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 18:52:40
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:52:32.427669 2026] [security2:error] [pid 14783:tid 14783] [client 87.106.217.70:35342] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||innolympics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "innolympics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixVcKVeDoJXmRZZY6q2RgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
maximonline.co.za
2026-06-12 18:10:25
(12 hours ago)
Brute Force SMTP AUTH Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-06-12 17:43:28
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 13:43:22.013319 2026] [security2:error] [pid 22906:tid 22906] [client 87.106.217.70:59296] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bradleybarefoot.bbproductionsonline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bradleybarefoot.bbproductionsonline.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixFOkz0HYOIOgkvqiPl4AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-12 17:38:59
(12 hours ago)
(mod_security) mod_security (id:11000011) triggered by 87.106.217.70: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000011) triggered by 87.106.217.70: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 20:38:55.988941 2026] [security2:error] [pid 351324:tid 351476] [remote 87.106.217.70:56616] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "pbiaas.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: ip87-106-217-70.pbiaas.com"] [hostname "gyrosplace.gr"] [uri "/wp-json/ldlms/v1/users"] [unique_id "aixEL66PDvwc_i5kBP5B1AAAyA8"]
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-12 17:22:33
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 87.106.217.70 (ip87-106-217-70.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 13:22:29.762965 2026] [security2:error] [pid 20557:tid 20557] [client 87.106.217.70:42962] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||luxandunion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "luxandunion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixAVXsejxUBeYC3tuLZdwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack