2026-06-10 19:05:40
(2 months ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 01:17:26
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 21:17:22.001953 2026] [security2:error] [pid 21505:tid 21518] [client 2001:41d0:701:1100::8ab5:50070] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.busybeerestaurant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.busybeerestaurant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aii7IduusALbk9Yx8p-LGAAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 09:56:02
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:55:56.014275 2026] [security2:error] [pid 25123:tid 25123] [client 2001:41d0:701:1100::8ab5:57830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.midwayisland.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.midwayisland.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aifjLFDj5sSYqGnNVWeMNwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
R.G.
2026-06-08 23:31:22
(2 months ago)
(XMLRPCorWHATEVER) Get lost please 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 3 in the las ...
show more
(XMLRPCorWHATEVER) Get lost please 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 20:23:04
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:22:54.593658 2026] [security2:error] [pid 17239:tid 17239] [client 2001:41d0:701:1100::8ab5:35340] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.enjoymycondos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.enjoymycondos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiXTHiIbuiWIsVAJWrhh8QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 17:26:46
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:26:41.487688 2026] [security2:error] [pid 11600:tid 11600] [client 2001:41d0:701:1100::8ab5:38306] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lakependoreillemobility.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lakependoreillemobility.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiWp0cXLod6SrQMAd8WY9AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 04:59:52
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 00:59:45.804210 2026] [security2:error] [pid 28259:tid 28259] [client 2001:41d0:701:1100::8ab5:45246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.geodogs.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.geodogs.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiT6wakWph7qlVTOWDeE1wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-06 12:33:40
(2 months ago)
(wp_login_try) srv104 WP Login Attempt 2001:41d0:701:1100::8ab5 (DE/Germany/-): 10 in the last 3600 ...
show more
(wp_login_try) srv104 WP Login Attempt 2001:41d0:701:1100::8ab5 (DE/Germany/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 22:51:58
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 18:51:53.164948 2026] [security2:error] [pid 21204:tid 21204] [client 2001:41d0:701:1100::8ab5:35316] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||altoshp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "altoshp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiNTCR3N5xZP25H5vK8fngAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 18:57:31
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 14:57:24.722663 2026] [security2:error] [pid 20446:tid 20446] [client 2001:41d0:701:1100::8ab5:53150] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.appalachianfolkmagician.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.appalachianfolkmagician.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiMcFCTmnqjLX3YfPYYdhwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 11:24:04
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:24:00.699478 2026] [security2:error] [pid 2683:tid 2683] [client 2001:41d0:701:1100::8ab5:37268] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thewhispertwins.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thewhispertwins.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiKx0KkpRSzL7-0ZBtYlTAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 10:24:05
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 06:23:58.444666 2026] [security2:error] [pid 27800:tid 27800] [client 2001:41d0:701:1100::8ab5:53374] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lahamradio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lahamradio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiKjvgWkR5wmC2XhoyEdNQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 21:36:42
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 17:36:35.516093 2026] [security2:error] [pid 15516:tid 15539] [client 2001:41d0:701:1100::8ab5:57660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.campingcosmetics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.campingcosmetics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiHv4-P8R8x3lBq6-bWuywAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 08:18:02
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh. ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:701:1100::8ab5 (vps-7581a32f.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:17:56.362487 2026] [security2:error] [pid 13579:tid 13579] [client 2001:41d0:701:1100::8ab5:50440] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tcit.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tcit.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiE0tNdMFYmDLYmgeA9TGgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack