🇺🇸
TPI-Abuse
2026-07-05 09:43:02
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 90.138.64.224 (m90-138-64-224.cust.tele2.lt): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 90.138.64.224 (m90-138-64-224.cust.tele2.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 05:42:54.953966 2026] [security2:error] [pid 21777:tid 21832] [client 90.138.64.224:57366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||koalacogs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "koalacogs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akonHp9db8v0qzMqcptniAAAAMk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-07-05 06:17:51
(1 day ago)
Web App Attack
Web App Attack
🇩🇪
DocNetzwerk
2026-07-04 09:25:01
(2 days ago)
(wordpress) Failed wordpress login from 90.138.64.224 (LT/Lithuania/m90-138-64-224.cust.tele2.lt)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-04 09:24:10
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 90.138.64.224 (m90-138-64-224.cust.tele2.lt): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 90.138.64.224 (m90-138-64-224.cust.tele2.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 05:24:03.602086 2026] [security2:error] [pid 23061:tid 23061] [client 90.138.64.224:50853] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||havenlaneministries.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "havenlaneministries.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akjRM78G-WGeqLA14T4TBQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-07-03 22:16:34
(3 days ago)
(wordpress) Failed wordpress login from 90.138.64.224 (LT/Lithuania/m90-138-64-224.cust.tele2.lt): ...
show more
(wordpress) Failed wordpress login from 90.138.64.224 (LT/Lithuania/m90-138-64-224.cust.tele2.lt): (CF_ENABLE)
show less
Brute-Force
🇳🇱
wlt-blocker
2026-07-03 07:38:57
(3 days ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 04:07:20
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 90.138.64.224 (m90-138-64-224.cust.tele2.lt): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 90.138.64.224 (m90-138-64-224.cust.tele2.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:07:15.386401 2026] [security2:error] [pid 26949:tid 26949] [client 90.138.64.224:59164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||verdeprofundo.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "verdeprofundo.net"] [uri "/wp-json/wp/v2/users"] [unique_id "akc1c1vQ3vNu_v37pew_QwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-03 03:04:36
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 23:34:10
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 90.138.64.224 (m90-138-64-224.cust.tele2.lt): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 90.138.64.224 (m90-138-64-224.cust.tele2.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:34:05.295008 2026] [security2:error] [pid 12396:tid 12396] [client 90.138.64.224:63447] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rwabutazafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rwabutazafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akb1bQNpD6yjUeENlEWxYwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-07-02 20:42:12
(4 days ago)
[ThuJul0222:42:10.0134822026][security2:error][pid3440607:tid3440663][client90.138.64.224:0]ModSecur ...
show more
[ThuJul0222:42:10.0134822026][security2:error][pid3440607:tid3440663][client90.138.64.224:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"noleggi.ch\"][uri\"/xmlrpc.php\"][unique_id\"akbNIsyE-v3uP_PVfC8UFwAAABI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇮
inlink.ltd
2026-07-02 17:47:42
(4 days ago)
Known malicious PHP file or CMS probe
Web App Attack