🇺🇸
TPI-Abuse
2026-06-18 19:09:58
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 15:09:50.145679 2026] [security2:error] [pid 10477:tid 10477] [client 107.152.32.141:36294] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bolivarbulletintimes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bolivarbulletintimes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajRCftA8J-YIY_-3qmv6cAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 18:06:28
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 14:06:22.394903 2026] [security2:error] [pid 19238:tid 19238] [client 107.152.32.141:52698] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nationalenq.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nationalenq.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajQznl0T21IEVvgJE6GZ0QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 15:02:47
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 11:02:41.301348 2026] [security2:error] [pid 30842:tid 30842] [client 107.152.32.141:38094] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bosdkbook.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bosdkbook.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajQIkW2FyA63aQSUu5Q_JgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 19:39:02
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 15:38:53.050718 2026] [security2:error] [pid 26447:tid 26447] [client 107.152.32.141:45666] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sharawi-gum.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharawi-gum.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajL3zapBbPMHCH-ecodhrAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 13:14:25
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 09:14:22.143790 2026] [security2:error] [pid 22303:tid 22391] [client 107.152.32.141:51888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pref-realestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pref-realestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai_6rq5Ho5XEFmKY4da7jQAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 07:28:35
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:28:27.711229 2026] [security2:error] [pid 26391:tid 26391] [client 107.152.32.141:45154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mrflatpeople.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mrflatpeople.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-pm4BgL9RM_7m5nRS1-wAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 17:01:50
(6 days ago)
[redacted] 107.152.32.141 - - [14/Jun/2026:19:01:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" " ...
show more
[redacted] 107.152.32.141 - - [14/Jun/2026:19:01:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:50.0) Gecko/20100101 Firefox/50.0"
[redacted] 107.152.32.141 - - [14/Jun/2026:19:01:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
[redacted] 107.152.32.141 - - [14/Jun/2026:19:01:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
[redacted] 107.152.32.141 - - [14/Jun/2026:19:01:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0"
[redacted] 107.152.32.141 - - [14/Jun/2026:19:01:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0"
[redacted] 107.15
...
show less
Hacking
Web App Attack
2026-06-14 14:46:15
(6 days ago)
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-06-14 09:00:05
(6 days ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-06-14 05:39:02
(6 days ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 00:30:52
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 20:30:47.349933 2026] [security2:error] [pid 16524:tid 16535] [client 107.152.32.141:39698] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.scottspencergfx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.scottspencergfx.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai32N5z8eaM-IvXAiqAf6QAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 19:24:57
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 15:24:52.143171 2026] [security2:error] [pid 30012:tid 30012] [client 107.152.32.141:44054] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.badgerkelley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.badgerkelley.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aisLhOHlmQFTB3LdvmAyXAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-11 07:16:07
(1 week ago)
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1 ...
show more
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1.1, GET / HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET /?author=3 HTTP/1.1, GET /?author=1 HTTP/1.1, GET /?author=2 HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 01:40:33
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 107.152.32.141 (cp.domaincloud.app): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 21:40:28.863356 2026] [security2:error] [pid 31186:tid 31186] [client 107.152.32.141:59592] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.joeordie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.joeordie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aioSDH5W0jeE5FTQeX75rgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-09 07:08:23
(1 week ago)
(wp_login_try) srv103 WP Login Attempt 107.152.32.141 (FR/France/cp.domaincloud.app): 10 in the last ...
show more
(wp_login_try) srv103 WP Login Attempt 107.152.32.141 (FR/France/cp.domaincloud.app): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack