🇺🇸
TPI-Abuse
2026-07-27 18:42:58
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:42:52.622449 2026] [security2:error] [pid 464155:tid 464155] [client 59.110.115.107:44678] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eatcakecup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eatcakecup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amemrAPy7Mj5NursT4--NAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-27 17:35:14
(2 hours ago)
dance4fitness.com.au:443 59.110.115.107 - - [28/Jul/2026:03:35:11 +1000] "GET /?author=1 HTTP/1.1" 4 ...
show more
dance4fitness.com.au:443 59.110.115.107 - - [28/Jul/2026:03:35:11 +1000] "GET /?author=1 HTTP/1.1" 404 174534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 17:00:49
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:00:44.867771 2026] [security2:error] [pid 4010431:tid 4010431] [client 59.110.115.107:49942] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||webuychesterfieldhouses.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "webuychesterfieldhouses.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ameOvBrF_eFGWp5hZxImvQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 15:27:31
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:27:23.723780 2026] [security2:error] [pid 869249:tid 869249] [client 59.110.115.107:49280] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||leolion.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "leolion.net"] [uri "/wp-json/wp/v2/users"] [unique_id "amd425ZymZUB4IBIo9-48AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 03:39:59
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 23:39:54.987925 2026] [security2:error] [pid 790259:tid 790259] [client 59.110.115.107:38904] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eduempowermentsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eduempowermentsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amA7ijWERvfJmg5LT2xTowAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-22 02:47:27
(5 days ago)
indigi-print-merch.com.au:443 59.110.115.107 - - [22/Jul/2026:12:47:25 +1000] "GET /?author=1 HTTP/1 ...
show more
indigi-print-merch.com.au:443 59.110.115.107 - - [22/Jul/2026:12:47:25 +1000] "GET /?author=1 HTTP/1.1" 404 313408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 00:58:25
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 20:58:17.827437 2026] [security2:error] [pid 120752:tid 120752] [client 59.110.115.107:38018] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||inverzona.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inverzona.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "amAVqb8dlOS5ERMl9HWKHgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-06-24 11:57:04
(1 month ago)
GET /wp-login.php (Tarpitted for 1d15h8m29s, wasted 8.06MB)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-23 22:00:48
(1 month ago)
Auto-ban: >3000 req/min op 2026-06-23
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-23 08:03:31
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 04:03:26.244573 2026] [security2:error] [pid 29120:tid 29120] [client 59.110.115.107:34516] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||holgerfeld.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "holgerfeld.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "ajo9zq-YL728uZX6J1GddwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-23 07:20:04
(1 month ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 06:06:24
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 02:06:19.535849 2026] [security2:error] [pid 9149:tid 9149] [client 59.110.115.107:49194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||master.chinookdrivingacademy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "master.chinookdrivingacademy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajoiW4-FrOHC7uWk_kewdwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-23 05:06:24
(1 month ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 05:04:01
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 59.110.115.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 01:03:55.411447 2026] [security2:error] [pid 29063:tid 29063] [client 59.110.115.107:36256] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||navarrete.ws|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "navarrete.ws"] [uri "/wp-json/wp/v2/users/7"] [unique_id "ajoTu4G_X14iRdGC9Ui6-gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ITSNF
2026-06-23 03:10:11
(1 month ago)
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=443
Port Scan
Hacking