🇺🇸
TPI-Abuse
2026-06-04 05:57:53
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 01:57:44.628640 2026] [security2:error] [pid 26840:tid 26840] [client 154.91.1.201:58772] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soundtrax.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aiET2KjechwpiaOl9M45iwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 13:24:59
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:24:52.722517 2026] [security2:error] [pid 9668:tid 9668] [client 154.91.1.201:40994] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.inquisitivequincie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.inquisitivequincie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiArJBgjYbh-qQ3tO2OK0gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-03 11:20:02
(1 day ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 05:20:34
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 01:20:27.759304 2026] [security2:error] [pid 3263:tid 3263] [client 154.91.1.201:38836] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||celebritybikinigossip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "celebritybikinigossip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag1Em3e1cxaveMAM3E0zEAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-05-19 10:23:51
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: HK/Hong Kong/svn.suitesmith.com
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 22:38:09
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 18:38:04.047205 2026] [security2:error] [pid 13704:tid 13704] [client 154.91.1.201:42658] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.studioyau.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.studioyau.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aguUzJccmgZEgB1oREmM6wAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 18:54:29
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 14:54:21.248912 2026] [security2:error] [pid 28293:tid 28293] [client 154.91.1.201:50146] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.psychiatryabuse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.psychiatryabuse.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agtgXUBZ8_wHtpGicQn8pgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 11:53:56
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 07:53:50.592720 2026] [security2:error] [pid 22586:tid 22655] [client 154.91.1.201:57774] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.property-management-companies-chicago.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.property-management-companies-chicago.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agr9zjr3xtXjTQCqx_iFRgAAAcY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Dolphi
2026-05-18 11:10:04
(2 weeks ago)
Excessive POST /wp-login.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 07:20:47
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 154.91.1.201 (svn.suitesmith.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 03:20:40.117504 2026] [security2:error] [pid 22385:tid 22390] [client 154.91.1.201:34382] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dwcmachining.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dwcmachining.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agq9yNBLRC1Li71LrSC4GwAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack