🇺🇸
TPI-Abuse
2026-11-12 14:43:54
UTC ·
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:43:46.396183 2026] [security2:error] [pid 25941:tid 25941] ...
show more
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:43:46.396183 2026] [security2:error] [pid 25941:tid 25941] [client 187.188.8.64:11218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||apexandroids.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "apexandroids.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avXQon7nDAxeNyGUjGOL5wAAABQ"], referer: https://apexandroids.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:03:53
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:03:49.979355 2026] [security2:error] [pid 20968:tid 20984] ...
show more
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:03:49.979355 2026] [security2:error] [pid 20968:tid 20984] [client 187.188.8.64:11217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tapas.soluciona.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tapas.soluciona.biz"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "avMIJd6aR2aXbnAyBlxG7QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
micropedro
2026-11-10 11:20:59
UTC ·
(2 days ago)
3 incidents: malicious activity. First: 2026-10-29 07:23, Last: 2026-11-10 07:20 UTC. Triggers: unknown.
Port Scan
🇮🇳
dineshskt4all
2026-11-10 08:28:30
UTC ·
(2 days ago)
[Tue Nov 10 08:28:28.169817 2026] [proxy_fcgi:error] [pid 2367156:tid 140338643588800] [client 187.188.8.64:0] AH01071: Got error 'Primary script unknown'
...
Brute-Force
🇺🇸
TPI-Abuse
2026-11-06 20:00:46
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 15:00:38.727122 2026] [security2:error] [pid 13967:tid 13967] ...
show more
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 15:00:38.727122 2026] [security2:error] [pid 13967:tid 13967] [client 187.188.8.64:7108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drayvian.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drayvian.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au4x5jYxI6lo3QLcAPTaigAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 18:13:18
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:13:10.551782 2026] [security2:error] [pid 27446:tid 27446] ...
show more
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:13:10.551782 2026] [security2:error] [pid 27446:tid 27446] [client 187.188.8.64:7095] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fitnessgearmagazine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fitnessgearmagazine.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au4YttojePawLFqt5zBArgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 08:32:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:31:56.336992 2026] [security2:error] [pid 19003:tid 19003] ...
show more
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:31:56.336992 2026] [security2:error] [pid 19003:tid 19003] [client 187.188.8.64:7087] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nebraskaadaptivesports.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nebraskaadaptivesports.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aurtfO3sVcdZXZpmMbpVygAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-04 01:29:51
UTC ·
(1 week ago)
[04/Nov/2026:03:29:50 +0200] -- 187.188.8.64 Ban reason: Scanner [CMS_GENERIC] | Request: POST /xmlrpc.php HTTP/1.1
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-04 01:10:06
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
Mundo Bueno
2026-11-03 03:33:05
UTC ·
(1 week ago)
[ISILIA Protection v2.3] Tentative d'accès: /wp-json/wp/v2/users/me [RATE LIMITED - 1800s quarantine] | Pays: MX | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.3
Hacking
Web App Attack
🇨🇿
lp
2026-11-02 12:18:03
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 187.188.8.64
2026-11-02T12:28:28+0100 vpn Access-Reject station: 187.188.8.64
Brute-Force
Web App Attack
🇺🇸
lostswordfish.com
2026-11-01 08:00:07
UTC ·
(1 week ago)
Wordfence waf block on secure2024 libjusco
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 04:13:34
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:13:30.523649 2026] [security2:error] [pid 8103:tid 8103] [c ...
show more
(mod_security) mod_security (id:225170) triggered by 187.188.8.64 (fixed-187-188-8-64.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:13:30.523649 2026] [security2:error] [pid 8103:tid 8103] [client 187.188.8.64:7082] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stinsonbeachsurfandkayak.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aua8aszzaFXX0DutJGJHiAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-10-31 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-10-30 19:03:27
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 187.188.8.64
2026-10-30T19:53:19+0100 vpn Access-Reject station: 187.188.8.64
Brute-Force
Web App Attack
