🇺🇸
TPI-Abuse
2026-06-10 16:37:32
(23 hours ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 12:37:28.476078 2026] [security2:error] [pid 13134:tid 13134] [client 208.113.157.11:57336] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theyoungstrategist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theyoungstrategist.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aimSyKGNYlwI4bYTlBs_lwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-10 05:32:28
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 03:11:17
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 23:11:09.325974 2026] [security2:error] [pid 2705:tid 2705] [client 208.113.157.11:36408] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.visionremota.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.visionremota.info"] [uri "/wp-json/wp/v2/users"] [unique_id "aijVzZAqfqQu50QxJAntowAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 22:09:41
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 18:09:36.479579 2026] [security2:error] [pid 2575:tid 2575] [client 208.113.157.11:33614] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.elgar.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.elgar.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aiiPIKnyvieWZhEVj1wh7QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 10:23:34
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:23:26.742224 2026] [security2:error] [pid 32695:tid 32695] [client 208.113.157.11:35014] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.digi-estudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.digi-estudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aifpnmz0NDyESN7T3RogUAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-08 14:01:14
(3 days ago)
10 attempts against mh-misc-ban on plum
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 02:09:18
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:09:13.336407 2026] [security2:error] [pid 366:tid 366] [client 208.113.157.11:45816] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.susanleeward.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.susanleeward.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiYkSbvE2LW09OoqrRWLQgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 19:25:47
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 15:25:39.764522 2026] [security2:error] [pid 17215:tid 17215] [client 208.113.157.11:55850] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.midwayisland.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.midwayisland.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiXFszrtsf-x4Hp1woKcHgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
R.G.
2026-06-07 07:25:09
(4 days ago)
(XMLRPCorWHATEVER) Get lost please 208.113.157.11 (US/United States/altorigin.dreamhost.net): 3 in t ...
show more
(XMLRPCorWHATEVER) Get lost please 208.113.157.11 (US/United States/altorigin.dreamhost.net): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
2026-06-06 04:58:00
(5 days ago)
[redacted] 208.113.157.11 - - [06/Jun/2026:06:57:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" " ...
show more
[redacted] 208.113.157.11 - - [06/Jun/2026:06:57:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
[redacted] 208.113.157.11 - - [06/Jun/2026:06:57:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
[redacted] 208.113.157.11 - - [06/Jun/2026:06:57:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0"
[redacted] 208.113.157.11 - - [06/Jun/2026:06:57:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
[redacted] 208.113.157.11 - - [06/Jun/2026:06:58:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-06-06 04:26:16
(5 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 00:15:34
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 20:15:27.930902 2026] [security2:error] [pid 32622:tid 32622] [client 208.113.157.11:40260] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.konahawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.konahawaiirealty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiNmn3NKWZLJOzkw8kOT2gAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 20:40:08
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 16:39:59.989667 2026] [security2:error] [pid 29488:tid 29488] [client 208.113.157.11:57524] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ardeeapps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ardeeapps.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiCRHxl7N-zpgjL01kRGgQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 11:09:55
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 208.113.157.11 (altorigin.dreamhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:09:48.649385 2026] [security2:error] [pid 30241:tid 30241] [client 208.113.157.11:50876] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lockdownclaim.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lockdownclaim.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiALfOdd0hWdB8mSwsn_NAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-03 03:28:48
(1 week ago)
(wp_login_try) srv101 WP Login Attempt 208.113.157.11 (US/United States/altorigin.dreamhost.net): 10 ...
show more
(wp_login_try) srv101 WP Login Attempt 208.113.157.11 (US/United States/altorigin.dreamhost.net): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack