🇺🇸
TPI-Abuse
2026-09-24 03:33:55
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.213.94 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.213.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 23:33:50.245359 2026] [security2:error] [pid 12253:tid 12253] [client 178.128.213.94:56900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.applemaccomputerconsulting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.applemaccomputerconsulting.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "arSaHtr4Pnehx5068ASI5wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-24 01:29:53
(12 hours ago)
(wordpress) Apache: Failed WordPress login from 178.128.213.94 (SG/Singapore/-): 10 in the last 3600 ...
show more
(wordpress) Apache: Failed WordPress login from 178.128.213.94 (SG/Singapore/-): 10 in the last 3600 secs (0-196)
show less
Hacking
🇫🇷
masterguru
2026-09-24 00:52:08
(13 hours ago)
(wordpress) Apache: Failed WordPress login from 178.128.213.94 (SG/Singapore/-): 10 in the last 3600 ...
show more
(wordpress) Apache: Failed WordPress login from 178.128.213.94 (SG/Singapore/-): 10 in the last 3600 secs (0-193)
show less
Hacking
🇫🇷
masterguru
2026-09-24 00:32:49
(13 hours ago)
(wordpress) Apache: Failed WordPress login from 178.128.213.94 (SG/Singapore/-): 10 in the last 3600 ...
show more
(wordpress) Apache: Failed WordPress login from 178.128.213.94 (SG/Singapore/-): 10 in the last 3600 secs (0-195)
show less
Hacking
2026-09-24 00:05:48
(13 hours ago)
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=20
Hacking
2026-09-23 23:51:12
(14 hours ago)
Bot / seems abusive / Apache connections: 22
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 23:43:37
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.213.94 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.213.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 19:43:30.384654 2026] [security2:error] [pid 2134:tid 2134] [client 178.128.213.94:61966] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.furbabieslivesmatter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.furbabieslivesmatter.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "arRkIs173Zay7ZP4UBQfdwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 23:06:47
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.213.94 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.213.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 19:06:39.467591 2026] [security2:error] [pid 18452:tid 18452] [client 178.128.213.94:51212] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.avaliantlife.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.avaliantlife.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "arRbf5h9Ii9ij9FppThmOAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-23 22:19:09
(15 hours ago)
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-23 20:35:54
(17 hours ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇪🇨
icp77
2026-09-23 19:39:00
(18 hours ago)
Abuse DDoS
DDoS Attack
FTP Brute-Force
Brute-Force
Exploited Host
Web App Attack
SSH
Port Scan
SQL Injection
Hacking
🇺🇸
oralunal
2026-09-23 19:35:43
(18 hours ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-09-23 18:24:52
(19 hours ago)
CMS (WordPress or Joomla) brute force attempt.
Web App Attack
2026-09-23 14:09:03
(23 hours ago)
[redacted] 178.128.213.94 - - [23/Sep/2026:16:08:54 +0200] "POST //xmlrpc.php HTTP/1.1" 200 403 "-" ...
show more
[redacted] 178.128.213.94 - - [23/Sep/2026:16:08:54 +0200] "POST //xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 178.128.213.94 - - [23/Sep/2026:16:08:55 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 178.128.213.94 - - [23/Sep/2026:16:08:56 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 178.128.213.94 - - [23/Sep/2026:16:08:56 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 178.128.213.94 - - [23/Sep/2026:16:08:57 +0200] "POST //xmlrpc.php HTTP/1.1" 2
...
show less
Hacking
Web App Attack
🇮🇹
VHosting
2026-09-22 10:20:03
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack