🇧🇷
SOC PR
2026-05-12 06:29:48
(3 weeks ago)
IPS: WordPress REST API Plugin Information Disclosure.
Hacking
🇩🇪
FeG Deutschland
2026-05-12 05:20:45
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 02:33:39
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 22:33:31.667790 2026] [security2:error] [pid 6380:tid 6402] [client 104.167.196.133:40154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||busybeerestaurant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "busybeerestaurant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agKRe7FTV7Q_R3TtRFQJHAAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 11:22:51
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 07:22:44.130421 2026] [security2:error] [pid 18525:tid 18525] [client 104.167.196.133:48250] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frelsburg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frelsburg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agG8BCqaqap1hMPAkSBbSgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 07:57:47
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 03:57:40.878018 2026] [security2:error] [pid 24913:tid 24913] [client 104.167.196.133:54008] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ewingmissouri.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ewingmissouri.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agGL9EZYy0Ytd150ZTgfcwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 07:12:40
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 03:12:33.970549 2026] [security2:error] [pid 21574:tid 21574] [client 104.167.196.133:43348] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.csm-dtc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.csm-dtc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agGBYW13oJYMlbRh2XZIIwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-11 06:53:38
(3 weeks ago)
2026-05-11T08:53:21.137463+02:00 wordpress(www.herz-ass-chapter.de)[1484500]: Blocked user enumerat ...
show more
2026-05-11T08:53:21.137463+02:00 wordpress(www.herz-ass-chapter.de)[1484500]: Blocked user enumeration attempt from 104.167.196.133 2026-05-11T08:53:24.232659+02:00 wordpress(www.herz-ass-chapter.de)[1484500]: Blocked user enumeration attempt from 104.167.196.133 2026-05-11T08:53:26.944910+02:00 wordpress(www.herz-ass-chapter.de)[1484500]: Blocked user enumeration attempt from 104.167.196.133 2026-05-11T08:53:29.838895+02:00 wordpress(www.herz-ass-chapter.de)[1484500]: Blocked user enumeration attempt from 104.167.196.133 2026-05-11T08:53:32.912128+02:00 wordpress(www.herz-ass-chapter.de)[1484500]: Blocked user enumeration attempt from 104.167.196.133
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 06:38:35
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 02:38:31.914551 2026] [security2:error] [pid 8231:tid 8231] [client 104.167.196.133:39748] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||speedysremodeling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "speedysremodeling.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agF5Z6HgUybl2YFGjYAP5wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Viveronese
2026-05-11 05:06:34
(3 weeks ago)
HTTP vulnerability scanning
Web App Attack
🇺🇸
mnsf
2026-05-11 05:05:40
(3 weeks ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 04:43:48
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 00:43:42.458517 2026] [security2:error] [pid 28559:tid 28569] [client 104.167.196.133:54090] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||boxvalleyrockers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boxvalleyrockers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agFefrOjKa5ILVYLW81B-wAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 04:15:47
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.196.133 (hn1.hostnauta.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 00:15:41.620731 2026] [security2:error] [pid 8661:tid 8661] [client 104.167.196.133:56826] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||walterceron.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "walterceron.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agFX7YQ5JSRoBDzwP6jAsQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-08 19:27:05
(1 year ago)
apache-wordpress-login
Brute-Force
Web App Attack
🇩🇪
Ba-Yu
2025-01-08 17:18:29
(1 year ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack