🇩🇪
4server
2026-11-08 20:15:19
UTC ·
(4 days ago)
[SunNov0821:15:13.3260062026][security2:error][pid366490:tid366605][client2a03:f480:2:a::3a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\ ...
show more
[SunNov0821:15:13.3260062026][security2:error][pid366490:tid366605][client2a03:f480:2:a::3a:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atARGS:p1.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(1974\*4249\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"www.gustotondo.ch\"][uri\"/wp-content/plugins/linkfast/images/wp-simple.php\"][unique_id\"avDYUTcVHoc3fqgM0naR_QAAAEA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 18:26:51
UTC ·
(4 days ago)
(mod_security) mod_security (id:210410) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:26:47.310692 2026] [security2:error] [pid 6615:tid 6615] [ ...
show more
(mod_security) mod_security (id:210410) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:26:47.310692 2026] [security2:error] [pid 6615:tid 6615] [client 2a03:f480:2:a::3a:58444] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in REQUEST_HEADERS:Cookie outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||jannetta.com|F|3"] [data "REQUEST_HEADERS:Cookie=gHsA=P\\xbe\\xd7\\xc1\\x09\\xe7\\x00\\xe6M,t\\x8c\\x8d\\xedv\\xd1"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "jannetta.com"] [uri "/wp-class-compat.php"] [unique_id "avC-5w50AFfBwgpvozqIZAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-10 12:20:44
UTC ·
(4 months ago)
Web attack blocked by Wordfence on www.kerkconcertenhouthem.nl (1 hit). Reported by CRMON.
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 12:38:31
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:38:26.076927 2026] [security2:error] [pid 11968:tid 12032] ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:38:26.076927 2026] [security2:error] [pid 11968:tid 12032] [client 2a03:f480:2:a::3a:45298] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nordicatrio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nordicatrio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahBOQgP0jOPrsBbPyxvSCAAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 14:56:13
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 10:56:09.285640 2026] [security2:error] [pid 25269:tid 25269] ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 10:56:09.285640 2026] [security2:error] [pid 25269:tid 25269] [client 2a03:f480:2:a::3a:52586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jacquelineperriam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jacquelineperriam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag8dCQ3e9HJovMpUde7iaAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 08:42:55
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 04:42:50.153787 2026] [security2:error] [pid 1946:tid 1946] [ ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 04:42:50.153787 2026] [security2:error] [pid 1946:tid 1946] [client 2a03:f480:2:a::3a:43976] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rochesterhistorical.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rochesterhistorical.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agrRCtgRYkwvwppKYNHexgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 04:45:29
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 00:45:25.660197 2026] [security2:error] [pid 25955:tid 25955] ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 00:45:25.660197 2026] [security2:error] [pid 25955:tid 25955] [client 2a03:f480:2:a::3a:36692] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.innovacionesnimba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.innovacionesnimba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agqZZbBh8GB_6aBgYlm4MQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 11:38:02
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 07:37:52.058209 2026] [security2:error] [pid 5810:tid 5810] [ ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 07:37:52.058209 2026] [security2:error] [pid 5810:tid 5810] [client 2a03:f480:2:a::3a:38134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jerryfeil.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jerryfeil.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agmokM0rCohFc6Bssyg4WAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 18:52:00
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 14:51:56.408910 2026] [security2:error] [pid 25232:tid 25232] ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 14:51:56.408910 2026] [security2:error] [pid 25232:tid 25232] [client 2a03:f480:2:a::3a:48028] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||solucionesmercadeodigital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "solucionesmercadeodigital.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agYZzNPs3dM2LDzerxLsmQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-05-14 13:03:41
UTC ·
(5 months ago)
WordPress author enumeration
Web App Attack
2026-05-14 11:00:52
UTC ·
(5 months ago)
2026-05-14T13:00:48.337916+02:00 wordpress(www.inboundagent.de)[2778654]: Blocked user enumeration attempt from 2a03:f480:2:a::3a 2026-05-14T13:00:49.240901+02:00 wordpress(www.inboundagent.de)[2778654]: Blocked user enumeration attempt from 2a03:f ...
show more
2026-05-14T13:00:48.337916+02:00 wordpress(www.inboundagent.de)[2778654]: Blocked user enumeration attempt from 2a03:f480:2:a::3a 2026-05-14T13:00:49.240901+02:00 wordpress(www.inboundagent.de)[2778654]: Blocked user enumeration attempt from 2a03:f480:2:a::3a 2026-05-14T13:00:49.770399+02:00 wordpress(www.inboundagent.de)[2778654]: Blocked user enumeration attempt from 2a03:f480:2:a::3a 2026-05-14T13:00:50.559019+02:00 wordpress(www.inboundagent.de)[2778654]: Blocked user enumeration attempt from 2a03:f480:2:a::3a 2026-05-14T13:00:51.335438+02:00 wordpress(www.inboundagent.de)[2778654]: Blocked user enumeration attempt from 2a03:f480:2:a::3a
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 17:58:45
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 13:58:41.355859 2026] [security2:error] [pid 4704:tid 4704] [ ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 13:58:41.355859 2026] [security2:error] [pid 4704:tid 4704] [client 2a03:f480:2:a::3a:48186] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gazelleplanner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gazelleplanner.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agNqUZDHnobTaEIJ9iavdgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 17:31:34
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 13:31:26.849635 2026] [security2:error] [pid 26663:tid 26663] ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 13:31:26.849635 2026] [security2:error] [pid 26663:tid 26663] [client 2a03:f480:2:a::3a:46448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||servecon.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "servecon.net"] [uri "/wp-json/wp/v2/users"] [unique_id "agNj7gzxC8TBXqC_YvfcQAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 16:37:16
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:37:09.855650 2026] [security2:error] [pid 19933:tid 19933] ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:37:09.855650 2026] [security2:error] [pid 19933:tid 19933] [client 2a03:f480:2:a::3a:41012] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grexicon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grexicon.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agNXNQJ23jdEAkt2MuUTLwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 16:02:55
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:02:48.255903 2026] [security2:error] [pid 10393:tid 10393] ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:f480:2:a::3a (sc3f605d1.fastvps-server.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:02:48.255903 2026] [security2:error] [pid 10393:tid 10393] [client 2a03:f480:2:a::3a:53240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rustyog.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rustyog.net"] [uri "/guides/wp-json/wp/v2/users"] [unique_id "agNPKD_j09uxmcIFUCyyjgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
