🇺🇸
TPI-Abuse
2026-06-05 16:40:06
(2 minutes ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 12:39:55.285466 2026] [security2:error] [pid 22567:tid 22567] [client 85.12.197.19:51165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lacycustombuilt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lacycustombuilt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiL726oDZxMJr-zKn-QN1gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 18:48:33
(21 hours ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:48:27.128902 2026] [security2:error] [pid 3411:tid 3411] [client 85.12.197.19:59727] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.digi-estudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.digi-estudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiHIe2P66YzlBuiYlmW0KQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-04 18:13:22
(22 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 17:57:28
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 13:57:21.429075 2026] [security2:error] [pid 14703:tid 14703] [client 85.12.197.19:44994] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.randymcelroy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.randymcelroy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiG8gUC5p6rScOXOTs0DMQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 19:07:54
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 15:07:50.604115 2026] [security2:error] [pid 643:tid 643] [client 85.12.197.19:55337] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.furbabieslivesmatter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.furbabieslivesmatter.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiB7hvNX7ylt-2-5eo6LSgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 11:43:45
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:43:36.934621 2026] [security2:error] [pid 26015:tid 26015] [client 85.12.197.19:34282] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ideaofauniversity.website|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/wp/v2/users"] [unique_id "aiATaCLk657KhBBzsdxRAwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 10:20:50
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 06:20:41.964289 2026] [security2:error] [pid 27603:tid 27603] [client 85.12.197.19:39940] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thewhispertwins.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thewhispertwins.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah__-cryp2mAwkrHe2bt5AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 07:20:21
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:20:12.430846 2026] [security2:error] [pid 23497:tid 23497] [client 85.12.197.19:39339] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kmelson.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kmelson.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah_VrMZsIbRHdCUXORLrCwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 22:02:13
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 18:02:06.503439 2026] [security2:error] [pid 15937:tid 15937] [client 85.12.197.19:48252] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||imbrasacademic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "imbrasacademic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah9S3mWwD3UiwVCvfdQqtwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 05:28:24
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 01:28:16.140491 2026] [security2:error] [pid 31838:tid 31838] [client 85.12.197.19:54239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tonytremblayauthor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tonytremblayauthor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah5p8K9mRI4os0bHsDgrvgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 22:08:29
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 18:08:21.493545 2026] [security2:error] [pid 17748:tid 17781] [client 85.12.197.19:50844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.jofdt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.jofdt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah4C1bb0oE2FAhheARAmzAAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 19:27:41
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:27:36.108495 2026] [security2:error] [pid 25377:tid 25377] [client 85.12.197.19:39231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.infinityartistsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.infinityartistsgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah3dKHT7QsD_7VnAMZVxpQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 21:06:19
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 17:06:11.595599 2026] [security2:error] [pid 11398:tid 11398] [client 85.12.197.19:42403] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rochesterhistorical.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rochesterhistorical.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ahyiw8TEOnClMawglHDg9QAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 18:34:08
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 14:33:59.732652 2026] [security2:error] [pid 4265:tid 4265] [client 85.12.197.19:34351] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.garanta.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.garanta.co"] [uri "/wp-json/wp/v2/users"] [unique_id "ahx_F6dzhEx7tNa4fG6PbwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 18:01:52
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 85.12.197.19 (hosting-vm-19.mesto.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 14:01:46.438174 2026] [security2:error] [pid 539:tid 539] [client 85.12.197.19:40821] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgesmarina.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgesmarina.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahx3ilBh_AJUP0KRVpkqrAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack