🇨🇦
SSH-Admin
2026-06-23 09:00:05
(22 hours ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 08:50:33
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 04:50:27.345308 2026] [security2:error] [pid 15464:tid 15464] [client 18.133.63.187:47252] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||buenasfrecuencias.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buenasfrecuencias.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpI03fEyXifzQ9m2uq_MAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-06-23 07:47:03
(23 hours ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
2026-06-23 06:51:10
(1 day ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 02:11:54
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 22:11:50.119751 2026] [security2:error] [pid 30106:tid 30106] [client 18.133.63.187:49848] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.alafiariverrendezvous.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.alafiariverrendezvous.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajnrZrxpI7w5i_-yH3SK6gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 00:41:55
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 20:41:50.393372 2026] [security2:error] [pid 21114:tid 21114] [client 18.133.63.187:51306] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.brushmileage.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.brushmileage.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajnWTkB6GY1tgsLUZInxRwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 04:36:52
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 00:36:46.645207 2026] [security2:error] [pid 8747:tid 8747] [client 18.133.63.187:60772] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tracytappan.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tracytappan.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aji73irnc8w7IsgP1mkP3gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 01:36:00
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 21:35:54.345121 2026] [security2:error] [pid 31060:tid 31060] [client 18.133.63.187:40246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.arthuryeung.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.arthuryeung.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajiRemycTCTvOJuDp1SF9AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 04:23:19
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 18.133.63.187 (iaweb12.ia-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 00:23:11.541140 2026] [security2:error] [pid 6461:tid 6461] [client 18.133.63.187:34212] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jellisonrepair.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jellisonrepair.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdnLz4Dp-TzxS6FWQpxVQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack