🇳🇿
billyborsht
2026-11-11 08:41:33
UTC ·
(2 days ago)
2026-11-11T21:41:33.005922+13:00 southern wordpress(abrahamic.nz)[299653]: Authentication attempt for unknown user adminlin from 178.249.214.10
...
Hacking
Web App Attack
Anonymous
2026-11-11 07:36:12
UTC ·
(2 days ago)
Bot / seems abusive / Apache connections: 24
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-11-10 17:56:16
UTC ·
(3 days ago)
Wordpress login attempts
Brute-Force
🇧🇪
madeit
2026-11-10 16:43:30
UTC ·
(3 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 15:16:27
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:16:24.407985 2026] [security2:error] [pid 11507:tid 1150 ...
show more
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:16:24.407985 2026] [security2:error] [pid 11507:tid 11507] [client 178.249.214.10:50755] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abcollie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abcollie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avM1SLBDCJc9ZsCObeMk-AAAAAg"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-10 13:25:00
UTC ·
(3 days ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:57:05
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:56:59.669013 2026] [security2:error] [pid 5174:tid 5259] ...
show more
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:56:59.669013 2026] [security2:error] [pid 5174:tid 5259] [client 178.249.214.10:65077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abusaimeh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abusaimeh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avMUm1I_yFApnINUZFXVuAAAAZA"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-10 08:28:17
UTC ·
(3 days ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 178.249.214.10 (CA/Canada/unn-178-249-214-10.datapacket.com)
Brute-Force
🇺🇸
TPI-Abuse
2026-11-10 07:58:26
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:58:21.813791 2026] [security2:error] [pid 14165:tid 1416 ...
show more
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:58:21.813791 2026] [security2:error] [pid 14165:tid 14165] [client 178.249.214.10:50435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||westernmassaa.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "westernmassaa.net"] [uri "/wp-json/wp/v2/users"] [unique_id "avLOnRHeOLmo_wdNYFT_OgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-11-10 07:13:29
UTC ·
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 06:59:29
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:59:21.875054 2026] [security2:error] [pid 21960:tid 2196 ...
show more
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:59:21.875054 2026] [security2:error] [pid 21960:tid 21960] [client 178.249.214.10:58536] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||altoshp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "altoshp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avLAyYNhvQ5KeynhBB-0XgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 06:38:10
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:38:03.853344 2026] [security2:error] [pid 20002:tid 2000 ...
show more
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:38:03.853344 2026] [security2:error] [pid 20002:tid 20002] [client 178.249.214.10:56499] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||incrp.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "incrp.org"] [uri "/wp-json/wp/v2/users"] [unique_id "avK7yw9TC61REVINLG98CAAAABQ"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-11-10 06:31:31
UTC ·
(3 days ago)
(wordpress) Failed wordpress login from 178.249.214.10 (CA/Canada/unn-178-249-214-10.datapacket.com)
Brute-Force
🇩🇪
FeG Deutschland
2026-11-10 06:08:38
UTC ·
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12457
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:02:30
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:02:22.518958 2026] [security2:error] [pid 27641:tid 2764 ...
show more
(mod_security) mod_security (id:225170) triggered by 178.249.214.10 (unn-178-249-214-10.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:02:22.518958 2026] [security2:error] [pid 27641:tid 27641] [client 178.249.214.10:52858] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||consolidatedoperationsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "consolidatedoperationsgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avKlXtsXuPdhfu27_0lGSgAAAB0"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack