🇺🇸
TPI-Abuse
2026-06-04 20:32:36
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 16:32:28.920897 2026] [security2:error] [pid 22373:tid 22373] [client 80.67.98.234:49362] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.smoothiessoupssalads.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.smoothiessoupssalads.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiHg3Jm8RJ0nrdORdqdhPAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 16:33:01
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 12:32:54.430958 2026] [security2:error] [pid 25769:tid 25769] [client 80.67.98.234:44936] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.geodogs.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.geodogs.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiGotk5tYztDF9bb5vXBvgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 15:09:15
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 11:09:09.669137 2026] [security2:error] [pid 17867:tid 17867] [client 80.67.98.234:53832] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kavahawaii.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kavahawaii.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiGVFXO0bpPS_TnH0UcYQQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 13:07:08
(23 hours ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 09:07:03.412151 2026] [security2:error] [pid 30670:tid 30670] [client 80.67.98.234:40908] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.losbarbarosdelnorte.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.losbarbarosdelnorte.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiF4d73KZP5nFKzttFCDkQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 07:58:21
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:58:15.316267 2026] [security2:error] [pid 26718:tid 26718] [client 80.67.98.234:40034] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gasoilliquidsdaily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gasoilliquidsdaily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiEwF7xnjwigGeN1keAkkQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 06:45:12
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:45:05.671797 2026] [security2:error] [pid 26726:tid 26726] [client 80.67.98.234:37566] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.yuichiro.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.yuichiro.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aiEe8XZoehIkQzh7H2eDOQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 04:29:05
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 00:28:58.655337 2026] [security2:error] [pid 27410:tid 27410] [client 80.67.98.234:45306] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.csm-dtc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.csm-dtc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiD_Cq7yexaNz9iALJ1t_AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 19:01:33
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 15:01:26.726823 2026] [security2:error] [pid 27172:tid 27172] [client 80.67.98.234:33866] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fgrotary.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fgrotary.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ahs0BsNBKAKmT9KoM2wAogAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 18:27:22
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 14:27:15.192516 2026] [security2:error] [pid 8435:tid 8435] [client 80.67.98.234:40182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.frelsburg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.frelsburg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahnag-Iv3GnImL2AAXV7CgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 15:45:56
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.on ...
show more
(mod_security) mod_security (id:225170) triggered by 80.67.98.234 (80-67-98-234.mercury.infoselva.online): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 11:45:50.818707 2026] [security2:error] [pid 9321:tid 9321] [client 80.67.98.234:51748] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.paleopathologist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.paleopathologist.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahm0rpjEuVqoEQXOiWhAbwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack