🇺🇸
TPI-Abuse
2026-06-21 07:42:44
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 03:42:38.620734 2026] [security2:error] [pid 3057:tid 3057] [client 195.114.26.207:52556] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hotpay.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hotpay.co"] [uri "/wp-json/wp/v2/users"] [unique_id "ajeV7mXatd8YBVghF4mTSAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 22:07:20
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 18:07:12.968398 2026] [security2:error] [pid 1977:tid 1977] [client 195.114.26.207:58580] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tracytappan.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tracytappan.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajcPEKQPn2ZllYRWynoBfgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 16:45:47
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 12:45:40.915377 2026] [security2:error] [pid 18561:tid 18561] [client 195.114.26.207:33782] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.americanexportimport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.americanexportimport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajbDtEjZpsGsHWiTpBVUpgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 12:20:51
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 08:20:46.356964 2026] [security2:error] [pid 5861:tid 5861] [client 195.114.26.207:57722] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.goodfrequencies.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.goodfrequencies.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajaFnpOpZkjXq7HHKhCpVAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 23:05:05
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 19:04:51.738695 2026] [security2:error] [pid 1720:tid 1720] [client 195.114.26.207:32938] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cienmalos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cienmalos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajXLE-0bnU6X3oskVua8jQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-19 13:06:00
(2 days ago)
Multiple WAF Violations
Web App Attack
2026-06-19 12:56:17
(2 days ago)
[redacted] 195.114.26.207 - - [19/Jun/2026:14:56:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" " ...
show more
[redacted] 195.114.26.207 - - [19/Jun/2026:14:56:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0"
[redacted] 195.114.26.207 - - [19/Jun/2026:14:56:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
[redacted] 195.114.26.207 - - [19/Jun/2026:14:56:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
[redacted] 195.114.26.207 - - [19/Jun/2026:14:56:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0"
[redacted] 195.114.26.207 - - [19/Jun/2026:14:56:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
[redacted] 195.114.26.207 - - [19/Jun/2026:14:56:14 +0200] "POST /xmlrpc.php HTTP/1
...
show less
Hacking
Web App Attack
2026-06-18 01:20:10
(3 days ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-18 00:36:31
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 20:36:24.449609 2026] [security2:error] [pid 12521:tid 12521] [client 195.114.26.207:58638] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jazziiafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jazziiafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajM9iOY5vtTBZ4HFoKyYpQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 22:46:10
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 18:46:04.410948 2026] [security2:error] [pid 29602:tid 29602] [client 195.114.26.207:51732] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.splashstation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.splashstation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajMjrF-ayljnAg9m-HpIRgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 10:35:53
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 06:35:46.502762 2026] [security2:error] [pid 7367:tid 7367] [client 195.114.26.207:38300] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.67ronin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.67ronin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajJ4gprfVVJ5bMWvSRIPrgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 00:50:55
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 20:50:45.970489 2026] [security2:error] [pid 14249:tid 14249] [client 195.114.26.207:48590] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.margroberts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.margroberts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajHvZfghztF6Ag3dAgYyrQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 23:37:37
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 19:37:30.351427 2026] [security2:error] [pid 14996:tid 14996] [client 195.114.26.207:43386] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mosheimlib.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mosheimlib.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajHeOo2ptNruJghHKDDm4QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 16:35:09
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 12:35:03.789423 2026] [security2:error] [pid 7426:tid 7426] [client 195.114.26.207:39396] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.smilingorc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.smilingorc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajF7N0970tkmxnk_tSUz2QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 15:49:22
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 195.114.26.207 (web-207.produhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 11:49:14.458508 2026] [security2:error] [pid 27427:tid 27427] [client 195.114.26.207:46980] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dceabronwilliams.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dceabronwilliams.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajFwetmTGft0USVMhAB9DAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack