🇺🇸
TPI-Abuse
2026-07-27 18:49:50
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 82.222.239.197 (host-82-222-239-197.reverse.sup ...
show more
(mod_security) mod_security (id:225170) triggered by 82.222.239.197 (host-82-222-239-197.reverse.superonline.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:49:46.128078 2026] [security2:error] [pid 1467528:tid 1467528] [client 82.222.239.197:55979] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sneedvillefarmersmarket.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sneedvillefarmersmarket.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ameoSgTejsR_eUxKijri1gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 17:54:52
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 82.222.239.197 (host-82-222-239-197.reverse.sup ...
show more
(mod_security) mod_security (id:225170) triggered by 82.222.239.197 (host-82-222-239-197.reverse.superonline.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:54:47.547514 2026] [security2:error] [pid 3633730:tid 3633730] [client 82.222.239.197:55667] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rocksolidhomebuilders.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rocksolidhomebuilders.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amebZ-OmHb-ok8mOgh-QCQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-27 15:54:18
(6 hours ago)
Fail2ban filtered
...
Web App Attack
🇩🇪
Holger
2026-07-26 19:21:30
(1 day ago)
WordPress WebAttack
Brute-Force
Web App Attack
🇩🇪
v1nc
2026-07-26 18:58:36
(1 day ago)
82.222.239.197 - - [26/Jul/2026:18:58:35 +0000] "GET /xmlrpc.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 ...
show more
82.222.239.197 - - [26/Jul/2026:18:58:35 +0000] "GET /xmlrpc.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36"
...
show less
Hacking
🇺🇸
Penny Packer
2026-07-24 16:07:19
(3 days ago)
Fail2Ban apache-tripwires
Web App Attack
🇬🇧
seniorlinuxadmin
2026-07-23 20:19:34
(4 days ago)
82.222.239.197 - - [23/Jul/2026:21:19:31 +0100] "POST /xmlrpc.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 ...
show more
82.222.239.197 - - [23/Jul/2026:21:19:31 +0100] "POST /xmlrpc.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36"
show less
Port Scan
Web App Attack
🇺🇦
Olexiy Backend
2026-07-23 16:25:25
(4 days ago)
82.222.239.197
...
Bad Web Bot
Web App Attack
2026-03-11 06:57:20
(4 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp
show less
Exploited Host
Bad Web Bot
🇩🇪
niceshops.com
2023-10-06 21:40:34
(2 years ago)
Web Attack (Oct 23 21:48:29 ScriptKiddie: request for /wp-login.php )
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack