π¬π§
andypiper
2026-09-27 01:02:23
(26 minutes ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-27 00:51:58
(36 minutes ago)
(mod_security) mod_security (id:225170) triggered by 154.47.29.230 (unn-154-47-29-230.datapacket.com ...
show more
(mod_security) mod_security (id:225170) triggered by 154.47.29.230 (unn-154-47-29-230.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 20:51:54.652686 2026] [security2:error] [pid 28973:tid 28973] [client 154.47.29.230:29784] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.keychainfilms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.keychainfilms.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "arhoquiQC21w39Z9eLkaPgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-27 00:31:29
(57 minutes ago)
(mod_security) mod_security (id:225170) triggered by 154.47.29.230 (unn-154-47-29-230.datapacket.com ...
show more
(mod_security) mod_security (id:225170) triggered by 154.47.29.230 (unn-154-47-29-230.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 20:31:22.915633 2026] [security2:error] [pid 26648:tid 26675] [client 154.47.29.230:15427] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||daraluz.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daraluz.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "arhj2tM-eK-YQ63fbvjp0AAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-27 00:27:00
(1 hour ago)
(wordpress) Failed wordpress login from 154.47.29.230 (HR/Croatia/unn-154-47-29-230.datapacket.com)
Brute-Force
πΊπΈ
bigwavedave
2026-09-27 00:17:14
(1 hour ago)
Wordpress Attack
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-27 00:12:34
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 154.47.29.230 (unn-154-47-29-230.datapacket.com ...
show more
(mod_security) mod_security (id:225170) triggered by 154.47.29.230 (unn-154-47-29-230.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 20:12:31.607767 2026] [security2:error] [pid 7577:tid 7577] [client 154.47.29.230:14045] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chaire-construction-4-0.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chaire-construction-4-0.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "arhfbyQWpNl62-nT_2EweAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
Starburst SysOp Team
2026-09-26 23:57:16
(1 hour ago)
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 230.29.47.154.rbl.malwa ...
show more
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 230.29.47.154.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3)
show less
Hacking
π©πͺ
paissangroup
2026-09-26 23:51:17
(1 hour ago)
Multiple WAF Violations
Web App Attack
π¬π·
setupgr
2026-09-26 23:46:28
(1 hour ago)
(mod_security) mod_security (id:11000011) triggered by 154.47.29.230 (HR/Croatia/City of Zagreb/Zagr ...
show more
(mod_security) mod_security (id:11000011) triggered by 154.47.29.230 (HR/Croatia/City of Zagreb/Zagreb/-/[AS212238 Datacamp Limited]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Sep 27 02:46:26.250752 2026] [security2:error] [pid 344026:tid 344196] [client 154.47.29.230:18145] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "datapacket.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: unn-154-47-29-230.datapacket.com"] [severity "CRITICAL"] [hostname "villa-izabela.com"] [uri "/"] [unique_id "arhZUkhF8oH004sbyBl4wgAAA1Y"]
show less
Port Scan
π©πͺ
grassau.com
2026-09-26 23:29:50
(1 hour ago)
(wordpress) Failed wordpress login from 154.47.29.230 (HR/Croatia/City of Zagreb/Zagreb/unn-154-47-2 ...
show more
(wordpress) Failed wordpress login from 154.47.29.230 (HR/Croatia/City of Zagreb/Zagreb/unn-154-47-29-230.datapacket.com)
show less
Brute-Force
πΊπΈ
WeekendWeb
2026-09-26 23:19:40
(2 hours ago)
Wordpress Vunerability attack
Web App Attack
Anonymous
2026-09-26 22:50:31
(2 hours ago)
(wordpress) Failed wordpress login from 154.47.29.230 (HR/Croatia/unn-154-47-29-230.datapacket.com)
Brute-Force
π©πͺ
Admin-Gito
2026-09-26 22:41:10
(2 hours ago)
154.47.29.230 - - [27/Sep/2026:00:37:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 723 "-" "Mozilla/5.0 ...
show more
154.47.29.230 - - [27/Sep/2026:00:37:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 723 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0"
154.47.29.230 - - [27/Sep/2026:00:37:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
154.47.29.230 - - [27/Sep/2026:00:37:12 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-09-26 22:39:42
(2 hours ago)
(wordpress) Failed wordpress login from 154.47.29.230 (HR/Croatia/unn-154-47-29-230.datapacket.com)
Brute-Force
π©πͺ
konseptit
2026-09-26 22:36:03
(2 hours ago)
(wordpress) Failed wordpress login from 154.47.29.230 (HR/Croatia/unn-154-47-29-230.datapacket.com)
Brute-Force