🇺🇸
TPI-Abuse
2026-06-12 18:46:53
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:46:45.552616 2026] [security2:error] [pid 13378:tid 13378] [client 41.185.64.163:34942] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dianamead.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dianamead.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixUFacTzdvYXHftiZ2YDgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 18:23:37
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:23:31.743459 2026] [security2:error] [pid 31267:tid 31267] [client 41.185.64.163:34802] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arkqp.kreweofhyatt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arkqp.kreweofhyatt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixOo10vsDswoEBpraF-IQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 17:21:25
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 13:21:21.068819 2026] [security2:error] [pid 24564:tid 24564] [client 41.185.64.163:34118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ultratecnologia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ultratecnologia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixAEb6nkheDmDbhqw2xpAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 16:59:16
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 12:59:12.017366 2026] [security2:error] [pid 27579:tid 27579] [client 41.185.64.163:54754] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pcga.golf|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pcga.golf"] [uri "/wp-json/wp/v2/users"] [unique_id "aiw64ODvDH5URxC7fKgO3wAAAAc"], referer: https://pcga.golf/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 16:34:06
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 12:33:59.239345 2026] [security2:error] [pid 18190:tid 18190] [client 41.185.64.163:34006] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||solporpoise.com.herston.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "solporpoise.com.herston.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aiw0936jDKRSmP1COuGv7wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-12 16:13:07
(15 hours ago)
Try to access /sinterklaas/xmlrpc.php
Web App Attack
🇫🇷
ELYAZ
2026-06-12 15:57:22
(16 hours ago)
(y4) Failed scan -byebye- from 41.185.64.163 (syf05-cvps01.hostserv.co.za): (CF_ENABLE)
Hacking
🇺🇸
TPI-Abuse
2026-06-12 15:40:34
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 11:40:30.000206 2026] [security2:error] [pid 8143:tid 8164] [client 41.185.64.163:38468] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theyogicat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theyogicat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwobcII_MEWQi0s8hlZewAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 14:52:50
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:52:42.343084 2026] [security2:error] [pid 30737:tid 30737] [client 41.185.64.163:39398] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geriterry.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geriterry.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwdOjQmUW_o0ZM9E3ZP7gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 14:21:56
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:21:48.076377 2026] [security2:error] [pid 8761:tid 8761] [client 41.185.64.163:42876] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelmoorefield.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelmoorefield.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwV_KCJI6fK34im3AVVRQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-12 14:07:22
(18 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 14:03:30
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 41.185.64.163 (syf05-cvps01.hostserv.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:03:26.821023 2026] [security2:error] [pid 12565:tid 12667] [client 41.185.64.163:48400] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vinylnotespodcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vinylnotespodcast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwRrvgQ4ocQO604q9OqjwAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-25 09:00:27
(5 months ago)
Failed Wordpress Logins
Web App Attack
2025-12-14 16:30:09
(5 months ago)
Failed Wordpress Logins
Web App Attack
2025-12-09 08:00:17
(6 months ago)
Failed Wordpress Logins
Web App Attack