🇺🇸
TPI-Abuse
2026-06-23 19:26:08
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 15:26:01.848934 2026] [security2:error] [pid 17656:tid 17656] [client 192.249.115.101:39020] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.d365geek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.d365geek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajrdySzH7jNWtP0We7hvXgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-23 14:55:40
(22 hours ago)
[ns41.kdns.gr] httpd-suspicious-path: sites=apnoia.gr; logs=/var/log/httpd/domains/apnoia.gr.log; sa ...
show more
[ns41.kdns.gr] httpd-suspicious-path: sites=apnoia.gr; logs=/var/log/httpd/domains/apnoia.gr.log; samples=/wp-json/wp/v2/users | /?author=1 | /?author=2
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 14:54:51
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 10:54:44.500570 2026] [security2:error] [pid 22229:tid 22229] [client 192.249.115.101:37564] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fundaciondamashcc.org.ec|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fundaciondamashcc.org.ec"] [uri "/wp-json/wp/v2/users"] [unique_id "ajqeNP5zj7y3pHx1L1TakwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-20 15:02:00
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-06-19 16:44:01
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 12:43:52.688509 2026] [security2:error] [pid 16135:tid 16135] [client 192.249.115.101:50544] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.doctorbalog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.doctorbalog.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVxyB7mneLCRFdPAIamwQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 13:03:27
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 09:03:22.444736 2026] [security2:error] [pid 23734:tid 23734] [client 192.249.115.101:59734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.boaredraven.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajPsmrl_TYBG2rEb7mXDzQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 02:40:42
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 22:40:38.209001 2026] [security2:error] [pid 23513:tid 23655] [client 192.249.115.101:50472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||leadingedgesupply.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "leadingedgesupply.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajNapgQqa6QIdZUhKGY15QAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 17:08:47
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:08:43.175304 2026] [security2:error] [pid 20051:tid 20051] [client 192.249.115.101:48526] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.edgebiopharma.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.edgebiopharma.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajAxm1kpsqwJt4W2mRod9wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 22:05:51
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:05:47.015623 2026] [security2:error] [pid 2671:tid 2671] [client 192.249.115.101:42926] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sharawi-gum.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharawi-gum.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8lu__yQJZJVnlUgRolDwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 00:34:47
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 20:34:40.966711 2026] [security2:error] [pid 5098:tid 5098] [client 192.249.115.101:48182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.scswat.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.scswat.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai33II6LHSaWNnuf4p9sVAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 09:40:54
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:40:45.968095 2026] [security2:error] [pid 14793:tid 14793] [client 192.249.115.101:33230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cycontechnology.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cycontechnology.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai0lnQ0HuhFOghqERYTYZAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 20:35:23
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 16:35:18.826906 2026] [security2:error] [pid 24522:tid 24522] [client 192.249.115.101:59008] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.batesstrategygroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.batesstrategygroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiscBptKT9Ts1eulSWnYKQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-11 18:16:15
(1 week ago)
Bot / seems abusive / Apache connections: 124
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇨🇦
Dolphi
2026-06-11 11:00:05
(1 week ago)
Excessive POST /wp-login.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 04:25:18
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 192.249.115.101 (ded5245.inmotionhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 00:25:11.131132 2026] [security2:error] [pid 20014:tid 20039] [client 192.249.115.101:48302] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||byandlarge.nl|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "byandlarge.nl"] [uri "/wp-json/wp/v2/users"] [unique_id "aio4p3yA3Zr8PtknjrzKSgAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack