🇺🇸
TPI-Abuse
2026-06-16 14:21:32
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 10:21:26.346456 2026] [security2:error] [pid 8542:tid 8542] [client 185.5.53.154:54378] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.comicpreservation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.comicpreservation.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajFb5imBP9KX5e7QNMeQvwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 11:48:47
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:48:43.684051 2026] [security2:error] [pid 24884:tid 24884] [client 185.5.53.154:60562] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nationalenq.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nationalenq.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajE4G7cxMDE-vPErXSSa8wAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:14:34
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:14:27.180042 2026] [security2:error] [pid 25958:tid 25958] [client 185.5.53.154:44334] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||honigcpa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "honigcpa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-KM93H8mcWUe0WQ6jFowAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 16:56:23
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 12:56:19.993513 2026] [security2:error] [pid 600:tid 735] [client 185.5.53.154:46632] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||byandlarge.nl|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "byandlarge.nl"] [uri "/wp-json/wp/v2/users"] [unique_id "ai7dM2a8o8E0Ek1dBIsY1wAAAlQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 21:29:22
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:29:16.520002 2026] [security2:error] [pid 9589:tid 9589] [client 185.5.53.154:49412] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mariettacaseyclub.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mariettacaseyclub.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3LrNyjFm05KsLF5mVdHwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-08 17:09:11
(1 week ago)
(wp_login_try) srv104 WP Login Attempt 185.5.53.154 (LT/Lithuania/vgh.lt): 10 in the last 3600 secs; ...
show more
(wp_login_try) srv104 WP Login Attempt 185.5.53.154 (LT/Lithuania/vgh.lt): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 02:17:11
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:17:03.208938 2026] [security2:error] [pid 5539:tid 5539] [client 185.5.53.154:35734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.smoothiessoupssalads.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.smoothiessoupssalads.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiYmH38Qb8tH0hhsVnl43gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 11:41:51
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 07:41:46.256932 2026] [security2:error] [pid 15771:tid 15771] [client 185.5.53.154:43844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.zerotaxlab.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.zerotaxlab.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiVY-gItScvNfs-WwKol5gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇱
Dolphi
2026-06-07 10:10:03
(1 week ago)
Excessive POST /xmlrpc.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 04:58:07
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 00:58:02.001031 2026] [security2:error] [pid 11206:tid 11206] [client 185.5.53.154:54902] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mayiasteadman.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mayiasteadman.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiT6WRrRXuWep2ejd6UhpgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 21:30:23
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 17:30:18.789247 2026] [security2:error] [pid 26256:tid 26256] [client 185.5.53.154:35270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||altoshp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "altoshp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiSRaid2RPrZmlNIVQb9ewAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-05-28 14:25:07
(2 weeks ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇩🇪
dbmwebdesign
2026-05-26 15:44:02
(3 weeks ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 20:32:17
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 16:32:13.809479 2026] [security2:error] [pid 2800:tid 2800] [client 185.5.53.154:38976] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thefrontporchoffering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thefrontporchoffering.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahSxzZthrwOYxOSLB5Re2AAAAHs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 21:27:27
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; ...
show more
(mod_security) mod_security (id:225170) triggered by 185.5.53.154 (vgh.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 17:27:20.159079 2026] [security2:error] [pid 14501:tid 14501] [client 185.5.53.154:50216] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.paleopathologist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.paleopathologist.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahNtOKcCaxAsKQmSqBrBlgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack