🇺🇸
TPI-Abuse
2026-03-30 13:58:19
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 93.177.119.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 93.177.119.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:58:13.688346 2026] [security2:error] [pid 31773:tid 31773] [client 93.177.119.131:29685] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eandgenergy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eandgenergy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acqBdcKajIFRBgXd0cYgbwAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 09:49:15
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 93.177.119.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 93.177.119.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 05:49:09.590154 2026] [security2:error] [pid 32552:tid 32552] [client 93.177.119.131:47915] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||marlinlee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marlinlee.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acj1lSSF46CaMkY7ZY2oRAAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 15:53:59
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 93.177.119.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 93.177.119.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 11:53:51.059338 2026] [security2:error] [pid 23092:tid 23203] [client 93.177.119.131:19151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||richardleeweatherman.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "richardleeweatherman.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acaoD6Xr0wkB0y4e_jh_OQAAAgM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 15:29:33
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 93.177.119.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 93.177.119.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 11:29:29.065560 2026] [security2:error] [pid 23133:tid 23133] [client 93.177.119.131:50537] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||churchtop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "churchtop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acAK2ZF5p8jTn_oYjlMYkAAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-13 11:04:18
(6 months ago)
"GET /wp-login.php HTTP/1.1"
Hacking
Web App Attack
2026-02-12 14:59:07
(6 months ago)
wordpress-trap
Web App Attack
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(6 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-01-07 09:30:02
(8 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 93.177.119.131 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 93.177.119.131 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
Hacking
2025-12-24 06:57:44
(8 months ago)
Forum/form spam
Web Spam
🇫🇷
tecnicorioja
2025-12-19 23:01:06
(8 months ago)
wp-login attack [19/Dec/2025:13:07:09
Brute-Force
Web App Attack
🇳🇱
i-turnradio.nl
2025-12-17 21:06:49
(8 months ago)
2025-12-17 @ 22:06:49 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇫🇷
solution.it
2025-12-17 12:49:40
(8 months ago)
[Wed Dec 17 13:49:40.129694 2025] [php7:error] [pid 759981:tid 759981] [client 93.177.119.131:11563] ...
show more
[Wed Dec 17 13:49:40.129694 2025] [php7:error] [pid 759981:tid 759981] [client 93.177.119.131:11563] script '/var/www/html/xmlrpc.php' not found or unable to stat
show less
Web App Attack
2025-12-16 02:30:47
(8 months ago)
2025-12-16T04:30:46.921482+02:00 zanati wp(www.sahpa.co.za)[978041]: Blocked authentication attempt ...
show more
2025-12-16T04:30:46.921482+02:00 zanati wp(www.sahpa.co.za)[978041]: Blocked authentication attempt for admin from 93.177.119.131
...
show less
Web App Attack
🇺🇸
nationaleventpros.com
2025-12-05 01:19:45
(9 months ago)
WordPress login attempt
Brute-Force
🇨🇦
SSH-Admin
2025-12-01 02:33:03
(9 months ago)
Probing for Exploits
Exploited Host
Web App Attack