🇺🇸
TPI-Abuse
2026-06-13 22:42:26
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 18:42:21.552353 2026] [security2:error] [pid 3184:tid 3184] [client 188.164.199.55:57340] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.investorsfundingusa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.investorsfundingusa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3czfUudkW2czXKtj3J_wAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 06:17:28
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:17:19.966906 2026] [security2:error] [pid 32318:tid 32318] [client 188.164.199.55:45716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.aroilcontrolsystem.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aroilcontrolsystem.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiz17-0t-xh7l9MjgojjKwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 22:13:04
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 18:13:00.448825 2026] [security2:error] [pid 15590:tid 15590] [client 188.164.199.55:48900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.intothebigempty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.intothebigempty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ainhbC_r3olULa2QEapYvgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 21:12:25
(4 days ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 03:50:43
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 23:50:36.969638 2026] [security2:error] [pid 32424:tid 32424] [client 188.164.199.55:47834] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.paulsingdahlsen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.paulsingdahlsen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aijfDBrUDTFztS6z2YPQ0QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Dolphi
2026-06-09 23:40:20
(5 days ago)
Excessive POST /wp-login.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 21:01:34
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:01:29.819395 2026] [security2:error] [pid 25874:tid 25874] [client 188.164.199.55:57574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.scswat.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.scswat.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aih_KSFj9580nNWq4WmBQwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 20:45:12
(5 days ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 20:00:19
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:00:13.148299 2026] [security2:error] [pid 16322:tid 16322] [client 188.164.199.55:35908] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hsoftwaresystems.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hsoftwaresystems.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aiXNzWDPdUG1JPTDtYvG1wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 19:15:07
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 15:14:59.904404 2026] [security2:error] [pid 27567:tid 27567] [client 188.164.199.55:57286] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.difusionens.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.difusionens.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiXDMxCSX2S97TcPpUAzegAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 03:50:09
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 23:50:00.924927 2026] [security2:error] [pid 32036:tid 32036] [client 188.164.199.55:51946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kavahawaii.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kavahawaii.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiTqaMSXFq-z94k7AnZEGgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 06:25:24
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 02:25:19.061621 2026] [security2:error] [pid 12249:tid 12249] [client 188.164.199.55:58524] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soonerstone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soonerstone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah_IzwypJhfM13_mQF5GigAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 02:07:55
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:07:48.945796 2026] [security2:error] [pid 30518:tid 30518] [client 188.164.199.55:55560] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.americanureport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.americanureport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah-MdN84qzrMmnTW_y-azAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 13:54:46
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 188.164.199.55 (vps1.vservers.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 09:54:42.848072 2026] [security2:error] [pid 29995:tid 29995] [client 188.164.199.55:46220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.smoothiessoupssalads.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.smoothiessoupssalads.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah7gomqwH4Se3PM96MqCPAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-02 12:30:43
(1 week ago)
188.164.199.55 - - [02/Jun/2026:14:30:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 206 "-" "Mozilla/5.0 ...
show more
188.164.199.55 - - [02/Jun/2026:14:30:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
188.164.199.55 - - [02/Jun/2026:14:30:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
188.164.199.55 - - [02/Jun/2026:14:30:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0"
188.164.199.55 - - [02/Jun/2026:14:30:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0"
188.164.199.55 - - [02/Jun/2026:14:30:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0"
...
show less
Brute-Force
Web App Attack