2026-06-04 23:04:40
(1 day ago)
Attac
Brute-Force
🇩🇪
big-cloud.nl
2026-06-04 14:23:07
(1 day ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 03:47:52
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 23:47:47.130915 2026] [security2:error] [pid 20653:tid 20653] [client 2a02:4780:2d:ccc6::1:52536] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nextstepplus.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nextstepplus.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aiD1Y7lec-e-hwnalSggqQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-04 00:46:20
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-06-03 13:06:04
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:05:55.983610 2026] [security2:error] [pid 21476:tid 21476] [client 2a02:4780:2d:ccc6::1:38360] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soonerstone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soonerstone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiAms83ZJJHhOwBjg6yrUQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 07:37:54
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:37:47.078290 2026] [security2:error] [pid 12730:tid 12730] [client 2a02:4780:2d:ccc6::1:57332] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thenutritionfixhollysprings.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thenutritionfixhollysprings.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah_Zy8XvX-81gkuyHOudJQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 08:22:17
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 04:22:12.305763 2026] [security2:error] [pid 15823:tid 15823] [client 2a02:4780:2d:ccc6::1:41048] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fishleadership.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fishleadership.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ahASNFECKdY3Z8TxS3DeVQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 07:52:21
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 03:52:14.750556 2026] [security2:error] [pid 24489:tid 24507] [client 2a02:4780:2d:ccc6::1:57982] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.greaternorthmiamihistory.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greaternorthmiamihistory.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ahALLsw0V9JYGyLfbOwulwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-05-21 01:47:29
(2 weeks ago)
(wp_login_try) srv103 WP Login Attempt 2a02:4780:2d:ccc6::1 (US/United States/-): 10 in the last 360 ...
show more
(wp_login_try) srv103 WP Login Attempt 2a02:4780:2d:ccc6::1 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 14:26:30
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 10:26:21.855921 2026] [security2:error] [pid 27423:tid 27423] [client 2a02:4780:2d:ccc6::1:59552] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.canebrakes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.canebrakes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag3EjRYaY_Lc6U0hcTT_twAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 03:37:21
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 23:37:16.653995 2026] [security2:error] [pid 18072:tid 18072] [client 2a02:4780:2d:ccc6::1:47928] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.psychiatryabuse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.psychiatryabuse.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agva7EP8r6tHpdw0u7409gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 11:32:11
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 07:32:06.663692 2026] [security2:error] [pid 22440:tid 22440] [client 2a02:4780:2d:ccc6::1:34530] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.darkalleyproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.darkalleyproductions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agr4tmdh61Ohtss7qMhZ9wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 11:09:37
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 07:09:27.914940 2026] [security2:error] [pid 23652:tid 23652] [client 2a02:4780:2d:ccc6::1:56810] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jan-wilson.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jan-wilson.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agrzZytfLmLwkhSG1JTtOAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 07:39:18
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 03:39:12.637374 2026] [security2:error] [pid 10535:tid 10535] [client 2a02:4780:2d:ccc6::1:40420] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.adonamusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.adonamusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aglwoNX4xFZ95Xsv9Gh_EgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 14:42:22
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:2d:ccc6::1 (srv851798.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 10:42:18.388897 2026] [security2:error] [pid 32542:tid 32574] [client 2a02:4780:2d:ccc6::1:48864] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||victorchiarizia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "victorchiarizia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agXfSjdJL2r9qx-mQ2f34QAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack