🇳🇱
Mangelot Hosting
2026-06-17 02:08:03
(9 minutes ago)
(wp_login_try) srv101 WP Login Attempt 159.89.200.30 (SG/Singapore/hacker-casino.com): 10 in the las ...
show more
(wp_login_try) srv101 WP Login Attempt 159.89.200.30 (SG/Singapore/hacker-casino.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 20:53:06
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 16:53:00.781528 2026] [security2:error] [pid 1852:tid 1852] [client 159.89.200.30:45016] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.badconsultingllc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.badconsultingllc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajG3rOqP2yU4Ruu3Eb1L8AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 16:41:11
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 12:41:04.845719 2026] [security2:error] [pid 7524:tid 7524] [client 159.89.200.30:60842] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.d-sinema.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.d-sinema.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajF8oLgtYazNqKlgKRJwggAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 09:11:47
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 05:11:43.874892 2026] [security2:error] [pid 11375:tid 11375] [client 159.89.200.30:53750] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fltsiminc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fltsiminc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajETTz2rnRkroK6oOb273QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 03:29:45
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 23:29:41.258329 2026] [security2:error] [pid 11939:tid 11939] [client 159.89.200.30:45764] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fundingangelinvestors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fundingangelinvestors.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajDDJQjF9_fZDMNIkigjegAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 12:29:38
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 08:29:33.302773 2026] [security2:error] [pid 23682:tid 23682] [client 159.89.200.30:51164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ruthbalser.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ruthbalser.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai_wLQlbXTKYssINP0KeIgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:55:17
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:55:09.619942 2026] [security2:error] [pid 26502:tid 26502] [client 159.89.200.30:60444] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kaylamaclaincounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai9pjZ9bksMQhqwYevgNBAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 11:39:02
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 07:38:58.429307 2026] [security2:error] [pid 7404:tid 7404] [client 159.89.200.30:44810] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bigislandhawaiirealestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bigislandhawaiirealestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai6S0uki_tdUa02UAXs1rQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-14 10:05:04
(2 days ago)
Multiple WAF Violations
Web App Attack
2026-06-13 12:57:02
(3 days ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 02:24:46
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 22:24:41.604553 2026] [security2:error] [pid 20912:tid 20912] [client 159.89.200.30:53540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jennyfiore.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jennyfiore.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aitt6UY7x4YTl7Coe9HewgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 00:57:05
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 20:57:01.955631 2026] [security2:error] [pid 29605:tid 29605] [client 159.89.200.30:58216] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.batesstrategygroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.batesstrategygroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aitZXQ4G7OiLr4oiHNZG1AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 06:40:16
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:40:09.922573 2026] [security2:error] [pid 31087:tid 31087] [client 159.89.200.30:44086] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nearfieldchrist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nearfieldchrist.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aipYSVIdlOihgwJXu-llSwAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 04:52:14
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 00:52:09.928917 2026] [security2:error] [pid 25590:tid 25590] [client 159.89.200.30:48372] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lowkeytiki.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lowkeytiki.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aijtebJ5Bk7Y00S1Tk4EigAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 04:30:07
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 159.89.200.30 (hacker-casino.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 00:30:03.346492 2026] [security2:error] [pid 32644:tid 32644] [client 159.89.200.30:50608] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ohiohca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ohiohca.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aijoSwJWpPbuUlckl6M2VwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack