🇩🇪
kjaerulff
2026-05-18 23:30:10
(2 weeks ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 04:16:26
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.115 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 00:16:22.412980 2026] [security2:error] [pid 6148:tid 6148] [client 147.78.182.115:62779] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||compmansys.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "compmansys.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afrAlvbCIQQTYIq_907egAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-04-29 10:53:04
(1 month ago)
[WedApr2912:52:58.3632962026][security2:error][pid1081949:tid1082116][client147.78.182.115:0]ModSecu ...
show more
[WedApr2912:52:58.3632962026][security2:error][pid1081949:tid1082116][client147.78.182.115:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"aid-web.com\"][uri\"/robots.txt\"][unique_id\"afHjCuAA-KX72lxAeVqEnwAAABc\"]
show less
Hacking
Web App Attack
🇺🇸
nationaleventpros.com
2026-04-18 03:47:31
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-04-15 11:52:31
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.115 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 07:52:23.317548 2026] [security2:error] [pid 4076205:tid 4076205] [client 147.78.182.115:19069] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad979x2koheRJCdnrGE7IgAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 22:06:23
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.115 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 18:06:17.887453 2026] [security2:error] [pid 3462266:tid 3462266] [client 147.78.182.115:64635] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||crowleywoodworking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crowleywoodworking.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adwXWWRb5uMMRD5CPuWmawAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-09-09 10:54:37
(8 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 147.78.182.115
2025-09-09T12:03:38+02 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 147.78.182.115
2025-09-09T12:03:38+02:00 vpn Access-Reject 'director' station: 147.78.182.115 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-08-13 19:50:34
(9 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 147.78.182.115
2025-08-13T20:53:48+02 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 147.78.182.115
2025-08-13T20:53:48+02:00 vpn Access-Reject 'amartin' station: 147.78.182.115 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-08-13T20:54:09+02:00 vpn Access-Reject 'jharris' station: 147.78.182.115 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇦
wil.com
2025-04-01 10:53:04
(1 year ago)
GlobalProtect login attempts with user SHEILAE.
VPN IP
Brute-Force
2024-10-26 07:47:13
(1 year ago)
Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
bigscoots.com
2024-10-10 20:54:27
(1 year ago)
(smtpauth) Failed SMTP AUTH login from 147.78.182.115 (US/United States/-): 5 in the last 3600 secs; ...
show more
(smtpauth) Failed SMTP AUTH login from 147.78.182.115 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-10-10 16:53:31 dovecot_login authenticator failed for (KUOzkK) [147.78.182.115]:44611: 535 Incorrect authentication data (set_id=hi)
2024-10-10 16:53:38 dovecot_login authenticator failed for (rSSjQAz) [147.78.182.115]:13833: 535 Incorrect authentication data (set_id=hi)
2024-10-10 16:53:49 dovecot_login authenticator failed for (4SGID8) [147.78.182.115]:20031: 535 Incorrect authentication data (set_id=hi)
2024-10-10 16:54:07 dovecot_login authenticator failed for (R0kH54Rm) [147.78.182.115]:15995: 535 Incorrect authentication data (set_id=hi)
2024-10-10 16:54:25 dovecot_login authenticator failed for (W6rqt6) [147.78.182.115]:49553: 535 Incorrect authentication data (set_id=hi)
show less
Brute-Force
SSH
🇪🇸
el-brujo
2024-06-09 21:23:00
(1 year ago)
DDoS Attack Layer 7 - REQUESTS / HTTP/2.0
DDoS Attack