🇺🇸
TPI-Abuse
2026-06-21 00:52:50
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 20:52:43.276756 2026] [security2:error] [pid 26758:tid 26758] [client 207.180.212.73:53046] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ruthbalser.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ruthbalser.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajc1247i-ShUehLCl_G39QAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 00:54:36
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 20:54:33.897175 2026] [security2:error] [pid 460:tid 460] [client 207.180.212.73:49166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nancyscafeandcatering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajXkyfRLvUKYF5Ahj1AsWQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 15:26:52
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 11:26:47.688424 2026] [security2:error] [pid 28541:tid 28547] [client 207.180.212.73:36476] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pref-realestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pref-realestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVft8P4nDap53S7v9pJ7AAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 23:46:54
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 19:46:47.251915 2026] [security2:error] [pid 28847:tid 28847] [client 207.180.212.73:34428] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bikinitweets.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bikinitweets.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajMx5yDM10K3qwQBFT4PCwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-17 22:29:31
(4 days ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 01:31:10
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 21:31:05.538849 2026] [security2:error] [pid 30875:tid 30875] [client 207.180.212.73:37120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.benchmarkbcs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.benchmarkbcs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajH42Z1shRqEyuVUF9_mQAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-16 22:28:23
(5 days ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 03:42:20
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 23:42:15.084638 2026] [security2:error] [pid 14596:tid 14596] [client 207.180.212.73:38088] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thomasgardner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thomasgardner.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajDGF17iVC8SS3oahh18_gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 00:15:26
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 20:15:19.445798 2026] [security2:error] [pid 5420:tid 5553] [client 207.180.212.73:44288] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.metropaint.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.metropaint.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajCVl7YZJijA9GGYBgh5nwAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 16:51:24
(6 days ago)
[server.tmg.gr] httpd-suspicious-path: sites=aidshep2018.gr; logs=/var/log/httpd/domains/aidshep2018 ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=aidshep2018.gr; logs=/var/log/httpd/domains/aidshep2018.gr.log; samples=/wp-json/wp/v2/users | /?author=1 | /?author=2
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 06:54:20
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:54:14.116763 2026] [security2:error] [pid 23531:tid 23531] [client 207.180.212.73:50500] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kaylamaclaincounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-hlmXs3OamY6VniVhSvAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 04:37:17
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:37:14.084492 2026] [security2:error] [pid 18975:tid 18992] [client 207.180.212.73:37270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.campingcosmetics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.campingcosmetics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-Beq4O3Z75KZgPGmB11wAAAY0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 11:40:19
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 07:40:12.149552 2026] [security2:error] [pid 26193:tid 26193] [client 207.180.212.73:51034] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fiasdesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fiasdesigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai6THBmO4zS7ljtkVxsRzAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 02:06:25
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:06:17.948252 2026] [security2:error] [pid 25621:tid 25621] [client 207.180.212.73:43448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.insidepublications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.insidepublications.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai4MmdvS9Wrig0cpdd4VPgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 00:14:21
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 207.180.212.73 (ares.omniteca.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 20:14:13.631333 2026] [security2:error] [pid 1939:tid 1939] [client 207.180.212.73:33540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bzbdesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bzbdesigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3yVX0vSR3gNtl3qUBp8QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack