🇬🇧
NotCool
2026-06-16 18:02:47
(13 hours ago)
[7200] (XMLRPC,WPLOGIN) Login failure/trigger from 82.223.66.221 (ES/Spain/cloud0.nubeado.com): 50 i ...
show more
[7200] (XMLRPC,WPLOGIN) Login failure/trigger from 82.223.66.221 (ES/Spain/cloud0.nubeado.com): 50 in the last 3600 secs
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-16 09:13:40
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 05:13:36.907751 2026] [security2:error] [pid 8243:tid 8243] [client 82.223.66.221:57416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.peterndudar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.peterndudar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajETwP95ASWIXyNZ72A0bgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-06-15 19:00:04
(1 day ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-06-15 16:53:02
(1 day ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 14:01:06
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:00:58.590709 2026] [security2:error] [pid 29304:tid 29319] [client 82.223.66.221:59108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coasterdvdsonline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coasterdvdsonline.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajAFmktMjmrdAeZLhltjNwAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 11:33:55
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:33:49.173600 2026] [security2:error] [pid 22042:tid 22042] [client 82.223.66.221:38916] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jazziiafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jazziiafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai_jHYQjHOgWdPNcHDRYmwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 22:39:46
(2 days ago)
CMS (WordPress or Joomla) brute force attempt.
Brute-Force
🇺🇸
TPI-Abuse
2026-06-11 14:58:43
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:58:36.005295 2026] [security2:error] [pid 4938:tid 4938] [client 82.223.66.221:41400] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.havenlaneministries.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.havenlaneministries.com"] [uri "/wp-json/wp/v2/users"] [unique_id "airNHAf6Pgjc0FEieAlSuwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 14:37:15
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:37:10.474765 2026] [security2:error] [pid 1838:tid 1838] [client 82.223.66.221:45394] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.paulsingdahlsen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.paulsingdahlsen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "airIFqd_TFwAdJyKkZJDawAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 23:13:32
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:13:26.304172 2026] [security2:error] [pid 14718:tid 14718] [client 82.223.66.221:51260] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jdeloa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jdeloa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiX7FvGg4Zx9WJh9OyL-XwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 13:41:37
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:41:31.971984 2026] [security2:error] [pid 27765:tid 27765] [client 82.223.66.221:51548] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.n4fh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.n4fh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiV1CzmyYE0U6Z8z7YE1-AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 01:46:46
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 21:46:42.646545 2026] [security2:error] [pid 30172:tid 30172] [client 82.223.66.221:60068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jesussotoca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jesussotoca.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiN8AiQVSTaE0joOpVnn5gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 11:02:36
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:02:31.971807 2026] [security2:error] [pid 22780:tid 22780] [client 82.223.66.221:34486] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.geodogs.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.geodogs.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiKsx2gRExnXI9AkgNWIWwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇱
Dolphi
2026-06-04 16:40:05
(1 week ago)
Excessive POST /wp-login.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 12:40:28
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 82.223.66.221 (cloud0.nubeado.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:40:20.814978 2026] [security2:error] [pid 17286:tid 17304] [client 82.223.66.221:40606] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||daraluz.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daraluz.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aiFyNGdfdDiP0jjsyzF0lAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack