🇺🇸
TPI-Abuse
2026-06-08 09:24:25
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 05:24:18.191799 2026] [security2:error] [pid 2227:tid 2227] [client 67.208.40.216:34200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.smoothiessoupssalads.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.smoothiessoupssalads.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiaKQp-x6m3gu3XyyaT8GAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-07 05:28:12
(4 days ago)
[server.tmg.gr] httpd-suspicious-path: sites=crisis-management2018.eu; logs=/var/log/httpd/domains/c ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=crisis-management2018.eu; logs=/var/log/httpd/domains/crisis-management2018.eu.log; samples=/wp-json/wp/v2/users | /?author=1 | /author/admin/
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 23:13:04
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 19:12:56.318476 2026] [security2:error] [pid 5794:tid 5794] [client 67.208.40.216:39680] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nessmonsters.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nessmonsters.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiSpeCbSV3vO9xg11do1XgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-06 15:52:47
(5 days ago)
[redacted] 67.208.40.216 - - [06/Jun/2026:17:52:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 67.208.40.216 - - [06/Jun/2026:17:52:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0"
[redacted] 67.208.40.216 - - [06/Jun/2026:17:52:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0"
[redacted] 67.208.40.216 - - [06/Jun/2026:17:52:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0"
[redacted] 67.208.40.216 - - [06/Jun/2026:17:52:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0"
[redacted] 67.208.40.216 - - [06/Jun/2026:17:52:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0"
[redacted] 67.208.40.2
...
show less
Hacking
Web App Attack
🇨🇦
SSH-Admin
2026-06-06 04:00:04
(5 days ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-06-06 00:38:03
(5 days ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-05 17:34:02
(6 days ago)
Blocked by CSF 13 firewall - Rule: US/United States/vps2.hostserver.site
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 16:25:54
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 12:25:49.918572 2026] [security2:error] [pid 24478:tid 24478] [client 67.208.40.216:37716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||altoshp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "altoshp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiL4jWuwPirNn3imRQwEFgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 15:25:05
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 11:24:57.383128 2026] [security2:error] [pid 25495:tid 25495] [client 67.208.40.216:48866] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ironsightsarmory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ironsightsarmory.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiLqSTbWNK2HbtWQ8hIpOQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 03:21:06
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 23:21:01.535370 2026] [security2:error] [pid 2089:tid 2160] [client 67.208.40.216:38924] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.plumeraproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.plumeraproductions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiJAnb4zHdXkiszfuk3GDwAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-04 15:03:07
(1 week ago)
[redacted] 67.208.40.216 - - [04/Jun/2026:17:03:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 67.208.40.216 - - [04/Jun/2026:17:03:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:54.0) Gecko/20100101 Firefox/54.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:17:03:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:17:03:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:17:03:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:44.0) Gecko/20100101 Firefox/44.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:17:03:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
[redacted] 67.208.40.2
...
show less
Hacking
Web App Attack
2026-06-04 12:43:42
(1 week ago)
[redacted] 67.208.40.216 - - [04/Jun/2026:14:43:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 67.208.40.216 - - [04/Jun/2026:14:43:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:53.0) Gecko/20100101 Firefox/53.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:14:43:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:14:43:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:14:43:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:14:43:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
[redacted] 67.208.40.216 - - [04/Jun/2026:14:43:40 +0200] "POST /xmlrpc.php HTTP
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 11:32:53
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 07:32:47.331414 2026] [security2:error] [pid 8031:tid 8031] [client 67.208.40.216:46758] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.americanureport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.americanureport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiFiX0hMrsrLDKf43h-ZcAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 09:21:27
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 05:21:21.134802 2026] [security2:error] [pid 7706:tid 7706] [client 67.208.40.216:51140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ardeeapps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ardeeapps.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiFDkfYYyQo5soaeSPuBewAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 23:35:36
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 67.208.40.216 (vps2.hostserver.site): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 19:35:30.122026 2026] [security2:error] [pid 2427:tid 2427] [client 67.208.40.216:48448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jdeloa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jdeloa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiC6Qq83x5u_YnEPqdzOPAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack