2025-10-16 09:00:39
(8 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-10-16 05:09:03
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 178.128.110.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.110.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 01:08:56.256786 2025] [security2:error] [pid 18464:tid 18464] [client 178.128.110.55:50955] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.xhumanlikerobots.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.xhumanlikerobots.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPB96IT8o7ENME0aOTyrUwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-15 21:31:06
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 178.128.110.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.110.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 17:31:01.148846 2025] [security2:error] [pid 16043:tid 16043] [client 178.128.110.55:55531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cedricleejones.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cedricleejones.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPASlQ09SkkCnopj-T6uwQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paulrusiecki
2025-10-15 17:36:27
(8 months ago)
178.128.110.55 - - [15/Oct/2025:19:36:27 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 645 ...
show more
178.128.110.55 - - [15/Oct/2025:19:36:27 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.110.55 - - [15/Oct/2025:19:36:27 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.110.55 - - [15/Oct/2025:19:36:27 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-10-15 17:25:00
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 178.128.110.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.110.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 13:24:55.540073 2025] [security2:error] [pid 22968:tid 22968] [client 178.128.110.55:56583] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ghmuganda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ghmuganda.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aO_Y5xTdMvEB98b_M0hI1wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2025-10-15 16:04:30
(8 months ago)
(wordpress) Failed wordpress login from 178.128.110.55 (SG/Singapore/-)
Brute-Force
🇦🇺
Rey
2025-10-15 16:01:03
(8 months ago)
WordPress xmlrpc.php attack [f0cun6sq]
Web App Attack
🇮🇹
VHosting
2025-10-15 15:35:13
(8 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
2025-10-15 14:15:16
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇳🇱
BlueWire Hosting
2025-10-15 14:10:15
(8 months ago)
Probing for Wordpress vulnerabilities
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2025-10-15 13:06:54
(8 months ago)
15.576 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇫🇷
sprmario
2025-10-15 12:31:02
(8 months ago)
Domain : elisasaglikhizmetleri.com
Rule : env
2025-10-15 12:30:54 192.168.1.68 GET /wp-includes/wlwm ...
show more
Domain : elisasaglikhizmetleri.com
Rule : env
2025-10-15 12:30:54 192.168.1.68 GET /wp-includes/wlwmanifest.xml - 443 - 172.68.164.61 HTTP/2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 - elisasaglikhizmetleri.com 404 0 0 4085 557 1196 - 178.128.110.55
show less
Hacking
SQL Injection
🇺🇸
mnsf
2025-10-15 12:05:56
(8 months ago)
Too many Status 40X (23)
Brute-Force
Web App Attack
🇺🇸
ambor
2025-10-15 11:54:22
(8 months ago)
Honeypot access: PHP file scan attempt: //xmlrpc.php. Path: //xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2025-10-15 11:05:49
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 178.128.110.55 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.110.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 07:05:42.965488 2025] [security2:error] [pid 16335:tid 16335] [client 178.128.110.55:54122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fatbastardcompetition.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fatbastardcompetition.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aO-ABhtQ_RpRmtGhoIreuAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack