🇺🇸
TPI-Abuse
2026-05-14 05:13:23
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 01:13:18.281012 2026] [security2:error] [pid 15564:tid 15 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 01:13:18.281012 2026] [security2:error] [pid 15564:tid 15564] [client 141.164.45.157:49676] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||test.high5-vr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "test.high5-vr.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agVZ7r-Wg2zYfZ17hAxZIgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-05-14 03:30:13
UTC ·
(5 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇨🇿
ptlab
2026-05-14 00:45:04
UTC ·
(5 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 00:07:01
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 20:06:54.675940 2026] [security2:error] [pid 444:tid 444] ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 20:06:54.675940 2026] [security2:error] [pid 444:tid 444] [client 141.164.45.157:50592] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newhopepetgrooming.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newhopepetgrooming.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agUSHodVHF7HzTf2cOvMRgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 23:17:39
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 19:17:34.737580 2026] [security2:error] [pid 14492:tid 14 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 19:17:34.737580 2026] [security2:error] [pid 14492:tid 14492] [client 141.164.45.157:38674] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kmelson.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kmelson.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agUGjhyfEivSTSK2wOq7vgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-13 21:51:04
UTC ·
(5 months ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, [2/2] done, POST /wp-login.php HTTP/2.0
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 21:40:13
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 17:40:09.320560 2026] [security2:error] [pid 14829:tid 14 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 17:40:09.320560 2026] [security2:error] [pid 14829:tid 14861] [client 141.164.45.157:54206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vinylnotespodcast.com.104ventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vinylnotespodcast.com.104ventures.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agTvuQDDugZI2diMbYg1RAAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 20:55:37
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 16:55:31.240949 2026] [security2:error] [pid 28733:tid 28 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 16:55:31.240949 2026] [security2:error] [pid 28733:tid 28733] [client 141.164.45.157:48556] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.iostation.kleens-uk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.iostation.kleens-uk.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agTlQ1G-itbryJR_vSuA3gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2026-05-13 15:35:37
UTC ·
(5 months ago)
WordPress bruteforce
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 15:30:17
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 11:29:59.281253 2026] [security2:error] [pid 4771:tid 477 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 11:29:59.281253 2026] [security2:error] [pid 4771:tid 4771] [client 141.164.45.157:45694] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||yogawithbubba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "yogawithbubba.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agSY9x3bxiyBcovgSluUCwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 14:51:55
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 10:51:48.396832 2026] [security2:error] [pid 18847:tid 18 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 10:51:48.396832 2026] [security2:error] [pid 18847:tid 18847] [client 141.164.45.157:50706] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||difusionens.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "difusionens.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agSQBKdL8IN2O99ZvPMtzQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-13 14:35:07
UTC ·
(5 months ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇺🇸
nationaleventpros.com
2026-05-13 14:10:04
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-05-13 12:58:26
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 08:58:20.980245 2026] [security2:error] [pid 10197:tid 10 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 08:58:20.980245 2026] [security2:error] [pid 10197:tid 10197] [client 141.164.45.157:56710] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nidusmbt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nidusmbt.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agR1bPsRj9su1uNqZPtJdgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 11:28:19
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 07:28:13.064642 2026] [security2:error] [pid 16456:tid 16 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.164.45.157 (141.164.45.157.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 07:28:13.064642 2026] [security2:error] [pid 16456:tid 16456] [client 141.164.45.157:58392] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||concentricsteel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "concentricsteel.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agRgTXfyvqdAbCD6j8E0qAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack