🇺🇸
TPI-Abuse
2026-03-29 14:25:50
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.28.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.28.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 10:25:42.490208 2026] [security2:error] [pid 21271:tid 21271] [client 178.20.28.25:26379] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ammatusk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ammatusk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ack2Znq1cgBKguAJ71aTfQAAACI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-03-26 20:15:26
(2 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-24 16:28:18
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.28.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.28.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 12:28:12.631601 2026] [security2:error] [pid 31869:tid 31869] [client 178.20.28.25:43379] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zaril.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zaril.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acK7nPEDlHJLTc3Pz_XjTQAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 03:31:18
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.28.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.28.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 23:31:10.355455 2026] [security2:error] [pid 8444:tid 8451] [client 178.20.28.25:55405] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pixelpushersdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelpushersdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab9ifsGiq-rnFgs6JG7rkgAAAIM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-15 03:36:01
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇬🇧
oncord
2025-12-19 11:47:15
(5 months ago)
Form spam
Web Spam
🇵🇱
sefinek.net
2024-08-30 14:40:07
(1 year ago)
This IP address has been identified as generating artificial traffic on websites following the purch ...
show more
This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15; rv:80.0) Gecko/20100101 Firefox/80.0 - -
show less
Bad Web Bot
🇵🇱
sefinek.net
2024-08-30 14:40:07
(1 year ago)
This IP address has been identified as generating artificial traffic on websites following the purch ...
show more
This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15; rv:80.0) Gecko/20100101 Firefox/80.0 - -
show less
Bad Web Bot
🇺🇸
MrDD
2024-07-09 18:19:09
(1 year ago)
Brute Force on Cisco Web VPN
Brute-Force
2023-11-13 23:10:23
(2 years ago)
opencart admin attack from fail2ban
...
DDoS Attack
Brute-Force
SSH
🇬🇧
headwall
2022-02-16 11:50:32
(4 years ago)
Attempted WordPress user enumeration by client 178.20.28.25
Web App Attack
🇬🇧
headwall
2022-02-16 11:50:32
(4 years ago)
Attempted WordPress user enumeration by client 178.20.28.25
Web App Attack