67.159.56.70

2026/09/30 21:22:58 [error] 19856#104864: *4067530 access forbidden by rule, client: 67.159.56.70, server: new.hondaforum.hu, request: "GET /topic/honda-szerviz/130446/ HTTP/1.1", host: "new.hondaforum.hu" ...

Web App Attack, Hacking

...

[HP01-SRV01-FR] Blocked by SysWarden Firewall (Web Attack Port 443)

[HP01-SRV01-FR] Blocked by SysWarden Firewall (Port Scan / Probing Port 502)

[HP01-SRV01-FR] Blocked by SysWarden Firewall (Web Attack Port 443)

Failed login attempt detected by Fail2Ban in plesk-modsecurity jail

(mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 26 01:55:34.272692 2025] [security2:error] [pid 10141:tid 10141] [client 67.159.56.70:8433] ModS ... show more (mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 26 01:55:34.272692 2025] [security2:error] [pid 10141:tid 10141] [client 67.159.56.70:8433] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bgellis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bgellis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aP231vFb7SGCIR1cKQZMDwAAAAY"], referer: https://www.google.com show less

(mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 22:22:48.746332 2025] [security2:error] [pid 21448:tid 21451] [client 67.159.56.70:37873] Mod ... show more (mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 22:22:48.746332 2025] [security2:error] [pid 21448:tid 21451] [client 67.159.56.70:37873] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cspmedia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cspmedia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aP2F-K6-pfFmArCHg4pYAAAAAEA"], referer: https://www.google.com show less

(mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 21:28:39.582805 2025] [security2:error] [pid 6214:tid 6214] [client 67.159.56.70:55305] ModSe ... show more (mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 21:28:39.582805 2025] [security2:error] [pid 6214:tid 6214] [client 67.159.56.70:55305] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||noriega.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "noriega.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aP15R-e-Z0eaJwK0UhKqsAAAAAA"], referer: https://www.google.com show less

(mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 21:10:02.263186 2025] [security2:error] [pid 15305:tid 15305] [client 67.159.56.70:22327] Mod ... show more (mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 21:10:02.263186 2025] [security2:error] [pid 15305:tid 15305] [client 67.159.56.70:22327] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||velvetculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "velvetculture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aP106u5kJTC_9U8W8HkQlAAAAAY"], referer: https://www.google.com show less

(mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 20:33:24.790776 2025] [security2:error] [pid 23318:tid 23318] [client 67.159.56.70:64477] Mod ... show more (mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 20:33:24.790776 2025] [security2:error] [pid 23318:tid 23318] [client 67.159.56.70:64477] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hatefmusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hatefmusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aP1sVGbN6TR1h2BD4akA5gAAAAw"], referer: https://www.google.com show less

(mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 19:36:27.178226 2025] [security2:error] [pid 28451:tid 28461] [client 67.159.56.70:49199] Mod ... show more (mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 19:36:27.178226 2025] [security2:error] [pid 28451:tid 28461] [client 67.159.56.70:49199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lauricella.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lauricella.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aP1e-0I_xiapwX0C6lnEQQAAAIA"], referer: https://www.google.com show less

(mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 19:17:12.859274 2025] [security2:error] [pid 6132:tid 6132] [client 67.159.56.70:8077] ModSec ... show more (mod_security) mod_security (id:225170) triggered by 67.159.56.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 19:17:12.859274 2025] [security2:error] [pid 6132:tid 6132] [client 67.159.56.70:8077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||convtek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "convtek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aP1aePJX1ny515BBoMDKogAAAAw"], referer: https://www.google.com show less

Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER