🇺🇸
TPI-Abuse
2026-06-15 02:31:23
(16 minutes ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:31:15.932750 2026] [security2:error] [pid 15368:tid 15368] [client 62.213.218.78:41698] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fundingangelinvestors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fundingangelinvestors.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai9j81AnPIqdeoz4IeCiJwAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:09:42
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:09:32.941805 2026] [security2:error] [pid 32459:tid 32459] [client 62.213.218.78:45208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.concentricsteel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.concentricsteel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai9QzCPMhaNpEEJArasrowAAAHk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-14 19:06:31
(7 hours ago)
Excessive 404/403 errors
Brute-Force
2026-06-14 08:01:10
(18 hours ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-14 07:02:57
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:02:52.097883 2026] [security2:error] [pid 16231:tid 16231] [client 62.213.218.78:44330] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tedharris.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tedharris.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai5SHGgJrXuawv6oHPVfuQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 05:07:23
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:07:16.478046 2026] [security2:error] [pid 26358:tid 26358] [client 62.213.218.78:36398] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.badgerkelley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.badgerkelley.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai43BNfU3JQPs1exVrVWtQAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-06-14 00:30:21
(1 day ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
2026-06-13 14:30:58
(1 day ago)
[redacted] 62.213.218.78 - - [13/Jun/2026:16:30:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 262 "-" "M ...
show more
[redacted] 62.213.218.78 - - [13/Jun/2026:16:30:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0"
[redacted] 62.213.218.78 - - [13/Jun/2026:16:30:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:48.0) Gecko/20100101 Firefox/48.0"
[redacted] 62.213.218.78 - - [13/Jun/2026:16:30:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
[redacted] 62.213.218.78 - - [13/Jun/2026:16:30:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0"
[redacted] 62.213.218.78 - - [13/Jun/2026:16:30:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0"
[redacted] 62.213.218.78 - - [13/Jun/2026:16:30:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 262
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 01:27:20
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 21:27:17.352018 2026] [security2:error] [pid 14499:tid 14518] [client 62.213.218.78:33926] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gabegabel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gabegabel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiyx9ZIFDZMj2SN15AgAhgAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 01:49:00
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 21:48:56.743843 2026] [security2:error] [pid 19331:tid 19331] [client 62.213.218.78:51736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.blacksheepoffroad.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.blacksheepoffroad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag5kiD57k6uZYVJk2teedQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 15:25:55
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 11:25:51.307902 2026] [security2:error] [pid 22623:tid 22623] [client 62.213.218.78:39918] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.onlinesuretybonds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.onlinesuretybonds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag3Sf4tfXcDY9WR7wlZvOwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-05-20 11:18:49
(3 weeks ago)
(wp_login_try) srv101 WP Login Attempt 62.213.218.78 (BE/Belgium/plesk02.deltasolutions.be): 10 in t ...
show more
(wp_login_try) srv101 WP Login Attempt 62.213.218.78 (BE/Belgium/plesk02.deltasolutions.be): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 05:42:25
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 01:42:21.712654 2026] [security2:error] [pid 26679:tid 26776] [client 62.213.218.78:45728] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dwcmachining.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dwcmachining.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag1JvTrqW05V40Y-hrB1BAAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-19 18:38:03
(3 weeks ago)
[redacted] 62.213.218.78 - - [19/May/2026:20:38:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 62.213.218.78 - - [19/May/2026:20:38:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
[redacted] 62.213.218.78 - - [19/May/2026:20:38:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
[redacted] 62.213.218.78 - - [19/May/2026:20:38:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:44.0) Gecko/20100101 Firefox/44.0"
[redacted] 62.213.218.78 - - [19/May/2026:20:38:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0"
[redacted] 62.213.218.78 - - [19/May/2026:20:38:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
apollonia-
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 00:18:58
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 62.213.218.78 (plesk02.deltasolutions.be): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 20:18:51.443670 2026] [security2:error] [pid 21605:tid 21605] [client 62.213.218.78:48426] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hayrun.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hayrun.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agusa00dKF3TBp_4QDjzzwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack