🇺🇸
omc
2026-06-13 05:14:33
(1 day ago)
Banned IP [QC]. GET /wp-json/ [QA].
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-06-13 05:04:08
(1 day ago)
levellapromotions.com.au:443 178.32.30.56 - - [13/Jun/2026:15:03:41 +1000] "GET /?author=3 HTTP/1.1" ...
show more
levellapromotions.com.au:443 178.32.30.56 - - [13/Jun/2026:15:03:41 +1000] "GET /?author=3 HTTP/1.1" 404 220120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇳🇱
ConsulHosting
2026-06-13 04:56:48
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 04:56:44
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.32.30.56 (l10.alanadiniz.net): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 178.32.30.56 (l10.alanadiniz.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:56:36.772044 2026] [security2:error] [pid 5678:tid 5678] [client 178.32.30.56:43060] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wurkroom.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wurkroom.biz"] [uri "/wp-json/wp/v2/users"] [unique_id "aizjBJ_JTBMwXA5RVi9D2QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-06-13 04:48:52
(1 day ago)
178.32.30.56 - - [13/Jun/2026:06:48:51 +0200] "POST /api/graphql HTTP/2.0" 403 17174 "-" "Mozilla/5. ...
show more
178.32.30.56 - - [13/Jun/2026:06:48:51 +0200] "POST /api/graphql HTTP/2.0" 403 17174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sverson
2026-06-13 04:33:56
(1 day ago)
Trolling for resource vulnerabilities
Hacking
🇩🇪
4server
2026-06-13 04:26:48
(1 day ago)
[SatJun1306:26:46.4026292026][security2:error][pid559517:tid559648][client178.32.30.56:0]ModSecurity ...
show more
[SatJun1306:26:46.4026292026][security2:error][pid559517:tid559648][client178.32.30.56:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prstartup.ch\"][uri\"/xmlrpc.php\"][unique_id\"aizcBggNZ0c-KPmjNSkgAQAAANc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 04:21:04
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.32.30.56 (l10.alanadiniz.net): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 178.32.30.56 (l10.alanadiniz.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:20:57.293203 2026] [security2:error] [pid 3094:tid 3094] [client 178.32.30.56:50178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||broneksuchanek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "broneksuchanek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aizaqeVWX8DQIrF3flyvOAAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
FireGuard Server
2026-06-13 03:40:12
(1 day ago)
Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-06-13 03:38:59
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.32.30.56 (l10.alanadiniz.net): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 178.32.30.56 (l10.alanadiniz.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 23:38:51.510987 2026] [security2:error] [pid 18181:tid 18181] [client 178.32.30.56:41354] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.riedmannfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.riedmannfamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aizQy9mAwgLRrA92XptTpwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-06-13 03:34:49
(1 day ago)
Fail2Ban apache-tripwires
Web App Attack
🇩🇪
LRob.fr
2026-06-13 03:15:07
(1 day ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
Vianpyro
2026-06-13 03:11:57
(1 day ago)
Honeypot: 22 request(s) in 102 min. Paths: /wp-json/bbp-api/v1/users, /, /wp-json/wp/v2/comments, /w ...
show more
Honeypot: 22 request(s) in 102 min. Paths: /wp-json/bbp-api/v1/users, /, /wp-json/wp/v2/comments, /wp-json/, /sitemap_index.xml. Method(s): GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 16276 (Btek Elektronik A.S. - AlanAdiniz.Com -).
show less
Web App Attack
Bad Web Bot
Brute-Force
Hacking
🇺🇸
TPI-Abuse
2026-06-13 03:07:18
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.32.30.56 (l10.alanadiniz.net): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 178.32.30.56 (l10.alanadiniz.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 23:07:11.673467 2026] [security2:error] [pid 13303:tid 13303] [client 178.32.30.56:40114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brandoncomputergeeks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brandoncomputergeeks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aizJXzCz9HsLjbpRQl9M-AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-13 03:02:52
(1 day ago)
(XMLRPC) WP XMLPRC Attack 178.32.30.56: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigge ...
show more
(XMLRPC) WP XMLPRC Attack 178.32.30.56: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 178.32.30.56 - - [13/Jun/2026:06:01:20 +0300] "POST /xmlrpc.php HTTP/2.0" 503 7306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Port Scan