🇺🇸
TPI-Abuse
2026-06-23 10:53:52
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 06:53:47.896228 2026] [security2:error] [pid 11419:tid 11419] [client 2001:880:0:12::12:33016] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ruthbalser.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ruthbalser.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpluwsl862W2hBbloyTvwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 22:43:33
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 18:43:27.457415 2026] [security2:error] [pid 19259:tid 19259] [client 2001:880:0:12::12:61962] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iplantotravel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iplantotravel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajm6j8crApjBr4nehBySzAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 16:47:53
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 12:47:46.362008 2026] [security2:error] [pid 23726:tid 23726] [client 2001:880:0:12::12:3938] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cajunpicasso.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cajunpicasso.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajlnMk73gEGflRht158QZQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 16:06:18
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 12:06:14.237133 2026] [security2:error] [pid 8779:tid 8795] [client 2001:880:0:12::12:21686] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.scottspencergfx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.scottspencergfx.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajlddsua4xnZ7AMCP1qKTAAAAI4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 14:57:17
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 10:57:09.478074 2026] [security2:error] [pid 24182:tid 24182] [client 2001:880:0:12::12:1716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.realclean.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.realclean.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajlNRWqL17juSmN79igcTAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-06-22 07:41:20
(1 day ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 01:44:36
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 21:44:31.575599 2026] [security2:error] [pid 9338:tid 9338] [client 2001:880:0:12::12:8200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.citizensforsanity.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.citizensforsanity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajiTf8T7urS3gUN98NHcpAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 13:54:58
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 09:54:50.291231 2026] [security2:error] [pid 4301:tid 4301] [client 2001:880:0:12::12:22610] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tracytappan.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tracytappan.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajftKs89UJsJliZNkdQRYwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 05:10:27
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 01:10:20.144916 2026] [security2:error] [pid 18875:tid 18875] [client 2001:880:0:12::12:58444] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.nomorenicenice.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nomorenicenice.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdyPESIrz4sZqXP98FxvAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 03:36:35
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 23:36:28.185940 2026] [security2:error] [pid 18284:tid 18284] [client 2001:880:0:12::12:64200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.j3pr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.j3pr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdcPCevIXsaw4NFeX1LEwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 17:23:52
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 13:23:44.273597 2026] [security2:error] [pid 3616:tid 3616] [client 2001:880:0:12::12:46688] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rddeckerphotography.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rddeckerphotography.com"] [uri "/blog/wp-json/wp/v2/users"] [unique_id "ajbMoKDcg5DhyBVmYcJ0EAAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 11:38:38
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:38:34.015382 2026] [security2:error] [pid 30247:tid 30247] [client 2001:880:0:12::12:55304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.uphillfarmvt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.uphillfarmvt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajUqOhQf4ES3zYFiwclbFgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 02:48:34
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 22:48:30.323876 2026] [security2:error] [pid 17163:tid 17170] [client 2001:880:0:12::12:58760] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pwihatah.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pwihatah.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajSt_kEri8vn299dKSmBNwAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-18 22:29:59
(5 days ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 17:53:22
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:880:0:12::12 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 13:53:15.669479 2026] [security2:error] [pid 15729:tid 15729] [client 2001:880:0:12::12:19178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dceabronwilliams.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dceabronwilliams.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajQwixC_oLfQxsCMwU7TvwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack