🇺🇸
TPI-Abuse
2026-11-06 15:10:18
UTC ·
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:10:13.219805 2026] [security2:error] [pid 10709:tid 10709] [clien ...
show more
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:10:13.219805 2026] [security2:error] [pid 10709:tid 10709] [client 177.54.205.5:35621] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mjkhan.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mjkhan.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au3t1W6p1-FWwYiDB5Wd4wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 08:06:08
UTC ·
(13 hours ago)
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:06:04.177105 2026] [security2:error] [pid 20105:tid 20246] [clien ...
show more
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:06:04.177105 2026] [security2:error] [pid 20105:tid 20246] [client 177.54.205.5:34920] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||koliosfoods.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "koliosfoods.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au2KbJ0XeRU4h_DvHrnMHAAAAZU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-05 01:10:01
UTC ·
(1 day ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-11-04 11:05:14
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:05:03.055879 2026] [security2:error] [pid 32099:tid 32099] [clien ...
show more
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:05:03.055879 2026] [security2:error] [pid 32099:tid 32099] [client 177.54.205.5:34874] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||phalanxemail.axiomemail.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "phalanxemail.axiomemail.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ausRX18QD01_az8WC_EjBAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-03 01:10:02
UTC ·
(3 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-11-01 06:33:12
UTC ·
(5 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 177.54.205.5
2026-11-01T07:25:22+0100 vpn Access-Reject station: 177.54.205.5
Brute-Force
Web App Attack
🇨🇿
lp
2026-11-01 02:02:30
UTC ·
(5 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 177.54.205.5
2026-11-01T02:43:39+0100 vpn Access-Reject station: 177.54.205.5
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 18:32:34
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 14:32:30.895611 2026] [security2:error] [pid 14360:tid 14360] [clien ...
show more
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 14:32:30.895611 2026] [security2:error] [pid 14360:tid 14360] [client 177.54.205.5:35393] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blindshine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blindshine.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "auY0PuQ-takVBcPD4CVOjAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-10-31 01:10:01
UTC ·
(6 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
xmission.com
2026-10-30 18:39:45
UTC ·
(1 week ago)
177.54.205.5 - - [30/Oct/2026:12:39:45 -0600] "POST /xmlrpc.php HTTP/2.0" 403 107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0"
...
Web App Attack
🇮🇹
LTM
2026-10-30 07:20:01
UTC ·
(1 week ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 06:25:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:25:50.726211 2026] [security2:error] [pid 29164:tid 29164] [clien ...
show more
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:25:50.726211 2026] [security2:error] [pid 29164:tid 29164] [client 177.54.205.5:35155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||n4fh.cosentient.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "n4fh.cosentient.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atxPbtGvsrwFEIBkAWJ2gAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 05:15:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:14:59.210176 2026] [security2:error] [pid 14515:tid 14515] [clien ...
show more
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:14:59.210176 2026] [security2:error] [pid 14515:tid 14515] [client 177.54.205.5:34813] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||orcastrong.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "orcastrong.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atw-0xgwpCQCcEVIFM4q5wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:15:56
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:15:47.519810 2026] [security2:error] [pid 3576:tid 3576] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 177.54.205.5 (177-54-205-5.weclix.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:15:47.519810 2026] [security2:error] [pid 3576:tid 3576] [client 177.54.205.5:35210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||matt-bechtel.neconebooks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "matt-bechtel.neconebooks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atnUQxvb7mYsW9JKOkbPnAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-20 07:13:07
UTC ·
(2 weeks ago)
Try to access /xmlrpc.php
Web App Attack
