🇺🇸
TPI-Abuse
2026-06-13 22:21:02
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 18:20:54.111279 2026] [security2:error] [pid 22413:tid 22413] [client 82.64.81.82:35160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thorndikestudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thorndikestudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3XxmuTnGu3Glh1xNW86wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 18:56:27
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 14:56:20.485576 2026] [security2:error] [pid 10283:tid 10299] [client 82.64.81.82:36572] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.theyogicat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.theyogicat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai2n1Oz1pvYlrZgQeu_prQAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-13 13:24:17
(12 hours ago)
CMS (WordPress or Joomla) brute force attempt.
Brute-Force
🇺🇸
TPI-Abuse
2026-06-13 00:52:26
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 20:52:18.854131 2026] [security2:error] [pid 13895:tid 13895] [client 82.64.81.82:58042] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.yogawithbubba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.yogawithbubba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiypwvySeZhXHWlTz3jeRAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-12 22:30:45
(1 day ago)
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-06-11 04:50:27
(2 days ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (5000900-122)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 15:07:00
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 11:06:55.413453 2026] [security2:error] [pid 25913:tid 25913] [client 82.64.81.82:44352] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.inquisitivequincie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.inquisitivequincie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ail9jzG4jlGrwOM_iBDNQQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-10 07:14:17
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-10 02:09:45
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 22:09:41.569004 2026] [security2:error] [pid 25047:tid 25047] [client 82.64.81.82:39194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kidswow.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kidswow.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aijHZTzVbmHR68I2UHTwTAAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-08 13:33:05
(5 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
tecnicorioja
2026-06-07 22:00:16
(6 days ago)
POST /xmlrpc.php [07/Jun/2026:11:52:38
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-06-05 13:40:06
(1 week ago)
Web App Attack
🇮🇱
Dolphi
2026-06-04 20:40:03
(1 week ago)
Excessive POST /wp-login.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 16:59:55
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 12:59:51.919369 2026] [security2:error] [pid 17601:tid 17601] [client 82.64.81.82:35612] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mccompu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mccompu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiGvB2wkUh2LX0o1-CKJqwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 16:36:38
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 82.64.81.82 (82-64-81-82.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 12:36:33.202288 2026] [security2:error] [pid 21684:tid 21684] [client 82.64.81.82:41524] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thehealthyplaceclayton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thehealthyplaceclayton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiGpkS7eYZmG9V0WUjcXeQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack