🇺🇸
TPI-Abuse
2026-06-17 15:58:21
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 11:58:15.985505 2026] [security2:error] [pid 21305:tid 21305] [client 158.220.119.163:59276] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lajoze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lajoze.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajLEF07nq9oIykBjwpQoegAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 14:29:31
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 10:29:27.810923 2026] [security2:error] [pid 30366:tid 30366] [client 158.220.119.163:58416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.sutherlandyogastudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sutherlandyogastudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajKvR34H4DedfDCqC_N4twAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 13:25:39
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 09:25:35.077792 2026] [security2:error] [pid 5651:tid 5670] [client 158.220.119.163:56350] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.campingcosmetics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.campingcosmetics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajKgT3hy_x7yyk3uZ2I8zwAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 00:43:57
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 20:43:50.057605 2026] [security2:error] [pid 10900:tid 10900] [client 158.220.119.163:54882] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sharawi-gum.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharawi-gum.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajHtxtS6NG_BKIekwoc43QAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-16 19:23:49
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 18:50:21
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 14:50:18.098382 2026] [security2:error] [pid 19051:tid 19051] [client 158.220.119.163:35094] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.boaredraven.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajGa6n6tGTSVnTD03JsoBgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 07:17:35
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 03:17:29.492003 2026] [security2:error] [pid 31431:tid 31431] [client 158.220.119.163:44618] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.intothebigempty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.intothebigempty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajD4iViDpO42t9HFBVcH-QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 02:26:58
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 22:26:54.593017 2026] [security2:error] [pid 4117:tid 4117] [client 158.220.119.163:55750] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mosheimlib.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mosheimlib.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajC0bltTR9F_oKPUivjxawAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 01:44:00
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:43:57.298757 2026] [security2:error] [pid 20492:tid 20492] [client 158.220.119.163:54764] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thomasgardner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thomasgardner.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajCqXZGxOPXp37H7PO5FZAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-16 01:11:17
(1 day ago)
[server.tmg.gr] httpd-suspicious-path: sites=aidshep2018.gr; logs=/var/log/httpd/domains/aidshep2018 ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=aidshep2018.gr; logs=/var/log/httpd/domains/aidshep2018.gr.log; samples=/wp-json/wp/v2/users | /?author=1 | /?author=2
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 06:20:20
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:20:14.358383 2026] [security2:error] [pid 8649:tid 8649] [client 158.220.119.163:57660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kh6jim.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kh6jim.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-Znt4qk2MninUFvpWS7wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 13:05:32
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 09:05:25.059177 2026] [security2:error] [pid 9215:tid 9215] [client 158.220.119.163:41780] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theyoungstrategist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theyoungstrategist.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai6nFeQl0bxlydJgjYaA4gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 13:38:36
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 09:38:31.900161 2026] [security2:error] [pid 2974:tid 2974] [client 158.220.119.163:46702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.aroilcontrolsystem.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aroilcontrolsystem.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai1dV42Klx7hc3CwjhjPoAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 12:13:09
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:13:04.616714 2026] [security2:error] [pid 24159:tid 24159] [client 158.220.119.163:53314] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.batesstrategygroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.batesstrategygroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai1JUNtHalHbOUOqPjYzzgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 04:43:04
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 158.220.119.163 (ifeanyi.dvictor.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:42:56.634052 2026] [security2:error] [pid 3028:tid 3119] [client 158.220.119.163:33430] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.asetiadi.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.asetiadi.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aiuOUIWCQrMdbo5yz1rLLgAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack