🇩🇪
mondor.ro
2026-06-15 18:45:33
(7 hours ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 178.33.112.23, Reason: ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 178.33.112.23, Reason:[(XMLRPC) WP XMLPRC Attack 178.33.112.23 (FR/France/jrm2.reyesit365.com): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-15 15:21:56
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 11:21:48.482891 2026] [security2:error] [pid 9947:tid 9947] [client 178.33.112.23:52194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fltsiminc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fltsiminc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajAYjCEkyW6PpnmEazm8JAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 14:21:30
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:21:22.874646 2026] [security2:error] [pid 355:tid 355] [client 178.33.112.23:33990] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bickleton.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bickleton.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajAKYllzqf7GJ0g_75QYPAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 06:53:26
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:53:19.568201 2026] [security2:error] [pid 1283:tid 1339] [client 178.33.112.23:36252] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bortec-corp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bortec-corp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-hX9UaPUFwKls8F3SzDgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Dolphi
2026-06-15 05:30:02
(20 hours ago)
Excessive POST /xmlrpc.php requests
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 08:59:43
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 04:59:36.473738 2026] [security2:error] [pid 18878:tid 18878] [client 178.33.112.23:52240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kerrywood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kerrywood.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai5teOVSZFPQ4ayAkVnSSwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 02:57:58
(1 day ago)
[redacted] 178.33.112.23 - - [14/Jun/2026:04:57:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 178.33.112.23 - - [14/Jun/2026:04:57:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:51.0) Gecko/20100101 Firefox/51.0"
[redacted] 178.33.112.23 - - [14/Jun/2026:04:57:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:48.0) Gecko/20100101 Firefox/48.0"
[redacted] 178.33.112.23 - - [14/Jun/2026:04:57:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
[redacted] 178.33.112.23 - - [14/Jun/2026:04:57:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
[redacted] 178.33.112.23 - - [14/Jun/2026:04:57:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0"
[redacted] 178.33.112.
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 21:10:48
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:10:40.416244 2026] [security2:error] [pid 19349:tid 19349] [client 178.33.112.23:51782] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||adona.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adona.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ai3HUNc5lfDK_95HuOLK7wAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-13 16:15:38
(2 days ago)
(wp_login_try) srv101 WP Login Attempt 178.33.112.23 (FR/France/jrm2.reyesit365.com): 10 in the last ...
show more
(wp_login_try) srv101 WP Login Attempt 178.33.112.23 (FR/France/jrm2.reyesit365.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 00:23:19
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 178.33.112.23 (jrm2.reyesit365.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 20:23:13.087454 2026] [security2:error] [pid 9705:tid 9705] [client 178.33.112.23:47118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.innolympics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.innolympics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiyi8dENs7quA_TFGw8MkwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack