🇺🇸
TPI-Abuse
2026-06-15 03:08:05
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:08:00.826125 2026] [security2:error] [pid 1283:tid 1362] [client 64.227.97.8:52472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||leadingedgesupply.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "leadingedgesupply.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai9skNUaPUFwKls8F3So8gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-14 22:31:38
(13 hours ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 00:46:38
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 20:46:33.720649 2026] [security2:error] [pid 26464:tid 26464] [client 64.227.97.8:34306] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.saynotoofland.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.saynotoofland.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai356WBDB5YEK9mrYDvUWgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-13 22:30:20
(1 day ago)
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-06-13 22:16:01
(1 day ago)
trying wp-login.php/xmlrpc.php 36 times in 1 minutes
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 02:14:35
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 22:14:27.658359 2026] [security2:error] [pid 15006:tid 15029] [client 64.227.97.8:51336] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||victorchiarizia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "victorchiarizia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiy9A-JQue08KyC6Kr98WAAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
KnightIndustries
2026-06-10 03:59:39
(5 days ago)
2026-06-10T05:59:36.541322+02:00 milkyway wordpress(learncryptography.pw)[3179328]: Authentication a ...
show more
2026-06-10T05:59:36.541322+02:00 milkyway wordpress(learncryptography.pw)[3179328]: Authentication attempt for unknown user richkiller from 64.227.97.8
2026-06-10T05:59:37.577103+02:00 milkyway wordpress(learncryptography.pw)[3178442]: XML-RPC authentication failure for macminty from 64.227.97.8
2026-06-10T05:59:38.418573+02:00 milkyway wordpress(learncryptography.pw)[3178430]: Authentication failure for macminty from 64.227.97.8
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 01:38:34
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 21:38:26.764285 2026] [security2:error] [pid 17508:tid 17508] [client 64.227.97.8:46876] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.elgar.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.elgar.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aijAEpUXXOujyGtDWaROagAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 00:43:29
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:43:24.365609 2026] [security2:error] [pid 17169:tid 17169] [client 64.227.97.8:50776] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.greatwesternfirearms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greatwesternfirearms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiizLCduH_9irKPj7bM7mAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 23:28:15
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 19:28:09.937886 2026] [security2:error] [pid 26658:tid 26658] [client 64.227.97.8:55346] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.disio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.disio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiihiUYbQ9Z4E5GIeFBupAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 03:13:13
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 23:13:09.501988 2026] [security2:error] [pid 32594:tid 32594] [client 64.227.97.8:34628] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.deolu.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.deolu.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ag0mxUrFN9ctxLPa9VwSIAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 20:21:41
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 16:21:37.047504 2026] [security2:error] [pid 16760:tid 16760] [client 64.227.97.8:45796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||karenbernsteinlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "karenbernsteinlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agzGUaQAk9G0-_48gRrpcwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-05-18 21:20:19
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-05-18 16:16:58
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 12:16:53.934145 2026] [security2:error] [pid 25401:tid 25401] [client 64.227.97.8:57740] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.stationrestaurant.ca|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.stationrestaurant.ca"] [uri "/wp-json/wp/v2/users"] [unique_id "ags7dccTmG2Gkx3sagiacQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 13:35:56
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 64.227.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 09:35:50.132900 2026] [security2:error] [pid 1768:tid 1768] [client 64.227.97.8:36926] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rohanbyles.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rohanbyles.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "agsVtlPe8LZi7sZdY24FlAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack