🇨🇭
backslash
2026-10-27 19:21:02
(19 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-08-24 20:27:28
(2 months ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-08-20 06:17:16
(2 months ago)
Brute force
Brute-Force
🇧🇪
cmbplf
2026-08-06 21:40:49
(2 months ago)
512 limiting connections by zone (2h48m59s)
DDoS Attack
🇧🇪
cmbplf
2026-08-06 21:20:48
(2 months ago)
614 limiting connections by zone (9m59s)
DDoS Attack
🇺🇸
TPI-Abuse
2026-03-25 03:51:35
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.154 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 23:51:31.837425 2026] [security2:error] [pid 32597:tid 32597] [client 178.20.30.154:41883] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aboutahome.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aboutahome.net"] [uri "/wp-json/wp/v2/users"] [unique_id "acNbw9dIF2wiX0EmjmMK0gAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-04 14:58:21
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.154 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 09:58:17.600087 2026] [security2:error] [pid 18109:tid 18109] [client 178.20.30.154:15507] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||byles.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "byles.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aahIidF-vd6Phh5rEw-BbwAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-04 13:14:55
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.30.154 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.30.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 08:14:48.059138 2026] [security2:error] [pid 22962:tid 22962] [client 178.20.30.154:30123] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chapa.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chapa.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aagwSAD7E1k0mjaYIyUCfAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-03-03 22:34:07
(7 months ago)
178.20.30.154 - - [03/Mar/2026:15:34:07 -0700] "POST /wp-login.php HTTP/1.1" 200 2326 "https://dooce ...
show more
178.20.30.154 - - [03/Mar/2026:15:34:07 -0700] "POST /wp-login.php HTTP/1.1" 200 2326 "https://dooce.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Brute-Force
2025-08-16 09:00:42
(1 year ago)
DNS Compromise
DDoS Attack
🇩🇪
NxtGenIT
2024-05-29 18:44:38
(2 years ago)
178.20.30.154 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attem ...
show more
178.20.30.154 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt
show less
Brute-Force
🇩🇪
NxtGenIT
2024-05-25 18:44:12
(2 years ago)
178.20.30.154 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attem ...
show more
178.20.30.154 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt
show less
Brute-Force
