🇫🇷
✨
2026-06-21 01:13:18
(3 hours ago)
Domain : twrbodybuilders.co.uk
Rule : xmlrpc
2026-06-21 00:50:25 ***hidden-privacy*** POST /xmlrpc.p ...
show more
Domain : twrbodybuilders.co.uk
Rule : xmlrpc
2026-06-21 00:50:25 ***hidden-privacy*** POST /xmlrpc.php - 443 - 178.233.165.246 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/99.0.0.0 Safari/537.36 - twrbodybuilders.co.uk 404 5 0 211 992 65 - -
show less
Web App Attack
🇩🇪
4server
2026-06-20 21:56:37
(6 hours ago)
[SatJun2023:56:35.4360322026][security2:error][pid3841204:tid3841215][client178.233.165.246:0]ModSec ...
show more
[SatJun2023:56:35.4360322026][security2:error][pid3841204:tid3841215][client178.233.165.246:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"sito-online.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajcMk1I6YJmhdC0o50u0GQAAAEg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 14:15:05
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.233.165.246 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 178.233.165.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 10:14:59.528107 2026] [security2:error] [pid 17812:tid 17812] [client 178.233.165.246:8089] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||honigcpa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "honigcpa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajagY-Ousq-jTOWcfJsoxQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2026-06-20 11:38:19
(16 hours ago)
(apache_scanners-2) Failed apache-scanners trigger with match [redacted])
Port Scan
🇺🇸
cwytech
2026-06-20 11:14:47
(17 hours ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 10:29:11
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.233.165.246 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 178.233.165.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 06:29:03.132603 2026] [security2:error] [pid 13891:tid 13891] [client 178.233.165.246:6119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cemesur-vision21.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cemesur-vision21.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajZrbwcJBS4DdRP22LoENAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 21:23:57
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.233.165.246 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 178.233.165.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 17:23:50.363414 2026] [security2:error] [pid 26281:tid 26281] [client 178.233.165.246:5553] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||losbarbarosdelnorte.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "losbarbarosdelnorte.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWzZq8tHtOSv-SNkJ27OgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 14:21:56
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.233.165.246 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 178.233.165.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 10:21:51.911979 2026] [security2:error] [pid 27554:tid 27554] [client 178.233.165.246:6212] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blublk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blublk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVQf7ObAaqURVMaF29m7AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack