🇺🇸
TPI-Abuse
2026-09-20 15:08:34
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:08:27.054912 2026] [security2:error] [pid 12868:tid 12868] [client 2a02:4780:12:4288::1:37092] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bennoyes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bennoyes.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aq_268hpnDwQTstMjlmLFAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:52:20
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:52:17.121224 2026] [security2:error] [pid 9963:tid 9963] [client 2a02:4780:12:4288::1:42062] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paulsingdahlsen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paulsingdahlsen.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aq_zIdpoYzSbGPAXBYOKgAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:22:29
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:22:23.737117 2026] [security2:error] [pid 25792:tid 25792] [client 2a02:4780:12:4288::1:33320] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||modestosoftwater.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modestosoftwater.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aq_sH4zGobdqMOu29f1U9gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 13:38:49
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:38:42.729192 2026] [security2:error] [pid 24463:tid 24463] [client 2a02:4780:12:4288::1:54538] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cycontechnology.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cycontechnology.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aq_h4q9OmWahK885TS0y5AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 12:46:39
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:46:33.057785 2026] [security2:error] [pid 2823557:tid 2823557] [client 2a02:4780:12:4288::1:48230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||edmestonfd.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edmestonfd.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aq_VqYsS-zlbC0oNum487gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 12:11:14
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:11:10.784878 2026] [security2:error] [pid 2116:tid 2116] [client 2a02:4780:12:4288::1:55110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||briannalls.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "briannalls.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aq_NXiVq-c7WqrhSwxavnwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 03:28:39
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 23:28:32.546070 2026] [security2:error] [pid 22324:tid 22324] [client 2a02:4780:12:4288::1:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.upskirtcrazy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.upskirtcrazy.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aq9S4FJ5tEohQxnuziQq8wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-09-19 21:11:37
(18 hours ago)
Attacking WordPress
2a02:4780:12:4288::1 - - [19/Sep/2026:23:11:33 +0200] "POST /wp-login.php HTTP/2 ...
show more
Attacking WordPress
2a02:4780:12:4288::1 - - [19/Sep/2026:23:11:33 +0200] "POST /wp-login.php HTTP/2.0" 503 19291 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇫🇷
Yepngo
2026-09-18 14:19:54
(2 days ago)
2a02:4780:12:4288::1 - - [18/Sep/2026:15:31:36 +0200] "POST /wp-login.php HTTP/2.0" 200 12507 "https ...
show more
2a02:4780:12:4288::1 - - [18/Sep/2026:15:31:36 +0200] "POST /wp-login.php HTTP/2.0" 200 12507 "https://blog.yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
2a02:4780:12:4288::1 - - [18/Sep/2026:16:19:54 +0200] "POST /xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-17 22:19:35
(2 days ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-16 22:18:52
(3 days ago)
Brute-Force
Web App Attack
🇩🇪
Lino Project
2026-09-16 10:06:06
(4 days ago)
2a02:4780:12:4288::1 - - [16/Sep/2026:12:06:05 +0200] "GET /wp-login.php HTTP/2.0" 403 282 "-" "Mozi ...
show more
2a02:4780:12:4288::1 - - [16/Sep/2026:12:06:05 +0200] "GET /wp-login.php HTTP/2.0" 403 282 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-09-15 20:02:43
(4 days ago)
Web App Attack
Web App Attack
2026-09-15 16:45:24
(4 days ago)
Web attack blocked by Wordfence on 1valkenburg.nl (6 hits). Reported by CRMON.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 10:46:19
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:12:4288::1 (srv859111.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 06:46:14.262065 2026] [security2:error] [pid 8965:tid 8965] [client 2a02:4780:12:4288::1:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cloudex.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cloudex.click"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqPb9hcbjFLF8UA4fmtRSQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack