🇺🇸
TPI-Abuse
2026-07-03 17:52:29
(11 minutes ago)
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 13:52:24.977363 2026] [security2:error] [pid 8621:tid 8621] [client 2.25.198.114:38904] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||meganmurph.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "meganmurph.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akf22HM9y-MhwaZQz9sCdgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 16:33:15
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 12:33:07.925425 2026] [security2:error] [pid 18315:tid 18315] [client 2.25.198.114:56066] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cienmalos.hodlmoser.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cienmalos.hodlmoser.com"] [uri "/wp-json/wp/v2/users/9"] [unique_id "akfkQx9vjRpGhi0Buo_4ZgAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-03 11:34:34
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 08:02:10
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 04:02:05.064238 2026] [security2:error] [pid 3553:tid 3553] [client 2.25.198.114:53352] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||primacomm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "primacomm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akdsffnbhGbEI4gMziy_cAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-03 02:19:41
(15 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 21:34:41
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 17:34:36.844886 2026] [security2:error] [pid 8187:tid 8187] [client 2.25.198.114:35704] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oruhu.org.circulodesonido.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oruhu.org.circulodesonido.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akbZbPSKAS57cr0PqZ8oggAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-07-02 18:48:13
(23 hours ago)
2.25.198.114 - - [02/Jul/2026:20:48:13 +0200] "GET /wp-json/wp/v2/users/me HTTP/1.1" "Mozilla/5.0 (W ...
show more
2.25.198.114 - - [02/Jul/2026:20:48:13 +0200] "GET /wp-json/wp/v2/users/me HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
VPN IP
🇫🇷
ELYAZ
2026-07-02 16:04:33
(1 day ago)
(y4) Failed scan -byebye- from 2.25.198.114 (US/United States/srv1749416.hstgr.cloud): (CF_ENABLE)
Hacking
🇫🇷
masterguru
2026-07-02 07:54:09
(1 day ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 2.25.198.114 (US/United States/srv1749416.hst ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 2.25.198.114 (US/United States/srv1749416.hstgr.cloud): 1 in the last 3600 secs (0-196)
show less
Hacking
🇲🇽
octageeks.com
2026-07-02 04:13:37
(1 day ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
mnsf
2026-07-02 02:05:04
(1 day ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 16:47:24
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 12:47:18.388514 2026] [security2:error] [pid 2470:tid 2470] [client 2.25.198.114:34062] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||huntingforebears.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "huntingforebears.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akVEljrb8iwg1z6tQMkQ1QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
spamverify.com
2026-07-01 16:43:34
(2 days ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-07-01 13:58:05
(2 days ago)
Wordfence waf block on uvfousor WPIDD
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 12:11:43
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 2.25.198.114 (srv1749416.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 08:11:38.114411 2026] [security2:error] [pid 8852:tid 8852] [client 2.25.198.114:56370] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dorismitchell.com.billymitchell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dorismitchell.com.billymitchell.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akUD-mJeludCKPT_6PsqzwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack