🇺🇸
bigwavedave
2026-06-10 23:09:02
(9 hours ago)
Wordpress Attack
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-10 22:33:08
(10 hours ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 22:24:05
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 18:23:57.978534 2026] [security2:error] [pid 9143:tid 9143] [client 82.223.216.36:39934] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bikinitweets.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bikinitweets.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ainj_V95uHjgO57eX_R2qgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 22:07:11
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 18:07:07.869990 2026] [security2:error] [pid 28264:tid 28264] [client 82.223.216.36:45936] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.greatwesternfirearms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greatwesternfirearms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aingCyT4Vc-mYIcVf_mepQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 14:36:29
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 10:36:21.621570 2026] [security2:error] [pid 14736:tid 14762] [client 82.223.216.36:57008] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.giere.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.giere.us"] [uri "/wp-json/wp/v2/users"] [unique_id "ail2ZRFaMDmh39OWRjZ_xAAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-10 11:16:51
(21 hours ago)
Blocked by CSF 13 firewall - Rule: ES/Spain/-
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 02:17:38
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 22:17:33.708095 2026] [security2:error] [pid 14620:tid 14620] [client 82.223.216.36:41322] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lowkeytiki.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lowkeytiki.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aijJPfUrduF-g9BjVankVwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-09 22:31:07
(1 day ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 20:38:42
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:38:38.472656 2026] [security2:error] [pid 28272:tid 28272] [client 82.223.216.36:38780] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||adona.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adona.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aih5zkPGdTIFhd9QVTlNrgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 17:21:45
(1 day ago)
[redacted] 82.223.216.36 - - [09/Jun/2026:19:21:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 82.223.216.36 - - [09/Jun/2026:19:21:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0"
[redacted] 82.223.216.36 - - [09/Jun/2026:19:21:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:48.0) Gecko/20100101 Firefox/48.0"
[redacted] 82.223.216.36 - - [09/Jun/2026:19:21:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0"
[redacted] 82.223.216.36 - - [09/Jun/2026:19:21:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
[redacted] 82.223.216.36 - - [09/Jun/2026:19:21:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
[redacted] 82.223.216.36 - - [09/J
...
show less
Hacking
Web App Attack
🇮🇱
Dolphi
2026-06-09 13:50:08
(1 day ago)
Excessive POST /wp-login.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 01:28:52
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:28:45.887118 2026] [security2:error] [pid 13593:tid 13593] [client 82.223.216.36:48858] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.97films.media|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.97films.media"] [uri "/wp-json/wp/v2/users"] [unique_id "aidsTSRRdCAs0hzOdOdcLQAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 01:18:14
(2 days ago)
[redacted] 82.223.216.36 - - [09/Jun/2026:03:18:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "M ...
show more
[redacted] 82.223.216.36 - - [09/Jun/2026:03:18:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0"
[redacted] 82.223.216.36 - - [09/Jun/2026:03:18:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
[redacted] 82.223.216.36 - - [09/Jun/2026:03:18:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0"
[redacted] 82.223.216.36 - - [09/Jun/2026:03:18:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0"
[redacted] 82.223.216.36 - - [09/Jun/2026:03:18:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0"
...
show less
Hacking
Web App Attack
2026-06-08 10:30:05
(2 days ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 09:56:26
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.216.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 05:56:18.200838 2026] [security2:error] [pid 20951:tid 20951] [client 82.223.216.36:39198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.losbarbarosdelnorte.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.losbarbarosdelnorte.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiVAQtSIGljNXO0avolnKgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack