🇺🇸
TPI-Abuse
2026-04-30 13:38:20
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 09:38:16.780027 2026] [security2:error] [pid 2582:tid 2582] [client 212.87.219.97:18583] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thenursingsite.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thenursingsite.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afNbSE_f4dwkSZwxTn2LDQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 07:51:06
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 03:51:02.442581 2026] [security2:error] [pid 4394:tid 4394] [client 212.87.219.97:22295] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||starcrestsales.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "starcrestsales.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afMJ5n45OwZMx6Zk78brKAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 01:49:01
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 21:48:53.517432 2026] [security2:error] [pid 17262:tid 17262] [client 212.87.219.97:52097] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dpcfab.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dpcfab.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae7AhWQ8kxIfv_6BEt4TIwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 21:26:03
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 17:25:59.580592 2026] [security2:error] [pid 21436:tid 21436] [client 212.87.219.97:61413] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cubbylure.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cubbylure.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae6C50mGXL17OywTIzwcDQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 15:20:10
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 11:20:05.745333 2026] [security2:error] [pid 201657:tid 201657] [client 212.87.219.97:47657] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ubuciko.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ubuciko.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeuKJaNyIZku9Q7jjudtHAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-21 14:44:41
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 10:44:35.946304 2026] [security2:error] [pid 552330:tid 552492] [client 212.87.219.97:61357] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.transitionalcareservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.transitionalcareservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeeNU8fS_62TPDOh9yxI1QAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-21 13:39:57
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 09:39:48.979780 2026] [security2:error] [pid 7696:tid 7696] [client 212.87.219.97:15787] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||televisonic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "televisonic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aed-JNLVq6mGKA5_YB_OewAAAHQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-18 23:33:43
(3 months ago)
GlobalProtect Password Spraying
Brute-Force
🇮🇩
BPS-StatisticsIndonesia
2026-01-04 10:29:58
(5 months ago)
WP Login Scan Activities
Web App Attack
🇺🇸
Psycho Solutions LLC
2026-01-01 11:48:25
(5 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/1/2026 11:48 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-27 10:32:53
(5 months ago)
WP Login Scan Activities
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:37:41
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam