🇺🇸
TPI-Abuse
2026-10-08 06:20:58
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 02:20:54.126513 2026] [security2:error] [pid 7577:tid 7577] [client 65.109.33.26:41430] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bronislawsuchanek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bronislawsuchanek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asc2RmjhLPm-c6HjxbZc_gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-08 04:42:19
(3 days ago)
Vulnerability scanning | method: GET | path: /wp-json/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x6 ...
show more
Vulnerability scanning | method: GET | path: /wp-json/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 | 2026-10-08 04:42 UTC
show less
Port Scan
Web App Attack
🇩🇪
FeG Deutschland
2026-10-07 23:51:43
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 20:45:51
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 16:45:44.230791 2026] [security2:error] [pid 29033:tid 29033] [client 65.109.33.26:50738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arellasoc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arellasoc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asaveH6QOmVJc-5AUJq30QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 20:10:35
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 16:10:30.229590 2026] [security2:error] [pid 4037:tid 4037] [client 65.109.33.26:49302] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||naturalacu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "naturalacu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asanNuYC8Wn2c9tUbJJlogAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 18:20:11
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 14:20:04.700822 2026] [security2:error] [pid 10219:tid 10219] [client 65.109.33.26:37810] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newcastle91.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newcastle91.org"] [uri "/wp-json/wp/v2/users"] [unique_id "asaNVDnFFoxfI8Ab1sj2DgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
FireGuard Server
2026-10-07 07:35:09
(4 days ago)
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-10-07 05:04:40
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 01:04:36.143937 2026] [security2:error] [pid 24595:tid 24595] [client 65.109.33.26:36498] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brandoncomputergeeks.com.directcch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brandoncomputergeeks.com.directcch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asXS5LgJW2FqhRmgZ5fmBQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 03:21:46
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 23:21:40.688533 2026] [security2:error] [pid 14650:tid 14650] [client 65.109.33.26:37446] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nekstlevel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nekstlevel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asW6xOkrIoXs32l65d9z0AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dtorrer
2026-10-06 12:54:55
(5 days ago)
Attacks on known web applications vulnerabilities.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 18:15:43
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 14:15:39.367524 2026] [security2:error] [pid 19538:tid 19538] [client 65.109.33.26:46734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cooteconsultinggroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cooteconsultinggroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ar_0y1HGKldvAnaMqu6IFgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 07:33:47
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 03:33:41.787856 2026] [security2:error] [pid 1336:tid 1444] [client 65.109.33.26:52178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||conservativedemocrat.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "conservativedemocrat.aafm.us"] [uri "/wp-json/wp/v2/users"] [unique_id "ar9eVd8arhFKbS_bKWLNmgAAAlY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 06:48:36
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 65.109.33.26 (webs26.futuresouls.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:48:31.537254 2026] [security2:error] [pid 9592:tid 9592] [client 65.109.33.26:55888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hodlmoser.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hodlmoser.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ar9TvyXJWfAV6ljsVV7hVwAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
edgeshield
2026-10-01 02:53:51
(1 week ago)
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
🇷🇺
DZBOT
2026-09-29 11:29:23
(1 week ago)
DZBOT: [MTA] NO LOGIN / auth failed
Port Scan
Brute-Force
