🇫🇷
SpaceHost-Server
2026-06-12 22:27:43
(3 hours ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 17:03:22
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 13:03:17.090323 2026] [security2:error] [pid 15186:tid 15186] [client 198.55.245.54:52534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nextstepplus.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nextstepplus.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aiw71SKQC8fH-apLQIm8agAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 05:48:13
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:48:06.973604 2026] [security2:error] [pid 10263:tid 10263] [client 198.55.245.54:41568] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||adona.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adona.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aij6lo9UChTQ-dbEZ0HNOgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 13:52:52
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:52:46.876645 2026] [security2:error] [pid 8936:tid 8936] [client 198.55.245.54:39366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.drgracetomastolentino.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.drgracetomastolentino.com"] [uri "/wordpress/wp-json/wp/v2/users"] [unique_id "aiV3rpCZZP-dtMrCTghdyAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 07:04:05
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 03:04:00.772563 2026] [security2:error] [pid 30281:tid 30335] [client 198.55.245.54:56170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.datuinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.datuinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiUX4Jvj9K6EwE58tjwcyAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 06:07:36
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 02:07:32.715724 2026] [security2:error] [pid 29300:tid 29300] [client 198.55.245.54:57444] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.inquisitivequincie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.inquisitivequincie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiUKpOp9reW03DK3b1MUCwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 02:19:40
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 22:19:35.002200 2026] [security2:error] [pid 18609:tid 18609] [client 198.55.245.54:43898] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ubuciko.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ubuciko.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiTVNpfciMISgHc9sBHO7AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 00:52:45
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 20:52:40.319104 2026] [security2:error] [pid 9729:tid 9729] [client 198.55.245.54:48120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||parastesh.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "parastesh.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiTA2LJEBGl6uZlkwKmeIgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 09:26:35
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 05:26:32.356464 2026] [security2:error] [pid 9700:tid 9700] [client 198.55.245.54:33446] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.smoothiessoupssalads.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.smoothiessoupssalads.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiKWSF95dCikAms7t21KAAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 02:58:51
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 22:58:45.672905 2026] [security2:error] [pid 23022:tid 23022] [client 198.55.245.54:59390] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.photosatthebeach.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.photosatthebeach.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiI7ZTkrCTf1Fcqqlr3FxgAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-04 01:13:36
(1 week ago)
[server.tmg.gr] httpd-suspicious-path: sites=crisis-management2018.eu; logs=/var/log/httpd/domains/c ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=crisis-management2018.eu; logs=/var/log/httpd/domains/crisis-management2018.eu.log; samples=/wp-json/wp/v2/users | /?author=1 | /author/admin/
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 18:08:35
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:08:31.197868 2026] [security2:error] [pid 10400:tid 10400] [client 198.55.245.54:37914] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||batfry.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "batfry.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiBtn-QPgrRdEtPhYIOaeQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 05:52:06
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 01:52:02.086752 2026] [security2:error] [pid 23978:tid 23985] [client 198.55.245.54:48270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jimlawrencesongs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jimlawrencesongs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahvMgos-lyxLQhvWitYeiQAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 11:02:07
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 07:02:02.268039 2026] [security2:error] [pid 16954:tid 16954] [client 198.55.245.54:37818] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||professionalpianomoversinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "professionalpianomoversinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahrDqmBWiz30gSnTYSOaegAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 12:32:55
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198- ...
show more
(mod_security) mod_security (id:225170) triggered by 198.55.245.54 (static-ip-198-55-245-54.net-198-55-245-0.rdns.managed.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 08:32:49.707132 2026] [security2:error] [pid 16930:tid 16930] [client 198.55.245.54:53238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tedharris.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tedharris.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahmHcWznne6KV_TsfrWH4wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack