🇺🇸
TPI-Abuse
2026-06-13 10:01:50
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:01:43.428208 2026] [security2:error] [pid 684:tid 684] [client 65.181.116.25:33462] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.convtek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.convtek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai0qh-GMozEHPdvjfvthWwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 09:35:04
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:34:56.214712 2026] [security2:error] [pid 21574:tid 21574] [client 65.181.116.25:34070] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.iee-usa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.iee-usa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai0kQO4O1nAk8FU2uJxhMAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 08:53:06
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:53:02.899075 2026] [security2:error] [pid 28463:tid 28463] [client 65.181.116.25:59496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.circleinthesquare.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.circleinthesquare.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai0abo8sDolb00k7JTwbzAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 03:58:35
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 23:58:31.504215 2026] [security2:error] [pid 10062:tid 10062] [client 65.181.116.25:58860] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ohiohca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ohiohca.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aizVZwl9dyUb0fn0iycp2QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 13:08:38
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 09:08:31.264206 2026] [security2:error] [pid 15110:tid 15110] [client 65.181.116.25:36054] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.yogawithbubba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.yogawithbubba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiwEz6JpOm_8k0pPIqjF_QAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 21:30:31
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 17:30:26.134161 2026] [security2:error] [pid 1004:tid 1004] [client 65.181.116.25:51982] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.garantaconsulting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.garantaconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiso8n7_FRqEPLLwF5--IAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 11:31:04
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 07:30:56.715712 2026] [security2:error] [pid 2995:tid 2995] [client 65.181.116.25:44004] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.scswat.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.scswat.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqccDAzy6fx8Ksc_Lw6MQAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 09:45:17
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 05:45:07.768232 2026] [security2:error] [pid 5628:tid 5628] [client 65.181.116.25:51860] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jennyfiore.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jennyfiore.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqDo_lTOMZ4ZPsIC1hZIQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 09:07:31
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 05:07:25.511524 2026] [security2:error] [pid 19560:tid 19744] [client 65.181.116.25:52690] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.busybeerestaurant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.busybeerestaurant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aip6zczIP0J4q0u7V4y3ewAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 01:53:45
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 21:53:40.578153 2026] [security2:error] [pid 12299:tid 12299] [client 65.181.116.25:45686] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ideaofauniversity.website|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/wp/v2/users"] [unique_id "aioVJM0Uhwl9joItvGyMZwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 22:10:14
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 18:10:06.353304 2026] [security2:error] [pid 4597:tid 4597] [client 65.181.116.25:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.upskirtcrazy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.upskirtcrazy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aingvpxSp_E_IbsVVqE6bQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 13:26:06
(1 week ago)
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, POST /wp-login.php HTTP/1.1, GET /?author=3 ...
show more
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, POST /wp-login.php HTTP/1.1, GET /?author=3 HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET /?author=2 HTTP/1.1, GET /?author=1 HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 11:09:59
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 07:09:54.638213 2026] [security2:error] [pid 19675:tid 19675] [client 65.181.116.25:46874] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bzbdesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bzbdesigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ailGAhR-TkYHJfwDmjXWSwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 10:26:17
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 06:26:12.965616 2026] [security2:error] [pid 24884:tid 24884] [client 65.181.116.25:53516] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.disio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.disio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aik7xNxvbX4eK_cLvgQ7owAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 05:12:26
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 65.181.116.25 (d10040.usc1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:12:21.603788 2026] [security2:error] [pid 21565:tid 21565] [client 65.181.116.25:45646] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rwabutazafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rwabutazafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aijyNchDuxrjAOCVJkKLwAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack