🇺🇸
TPI-Abuse
2026-06-21 21:42:40
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 17:42:34.674196 2026] [security2:error] [pid 23942:tid 23942] [client 178.63.12.183:34038] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.aroilcontrolsystem.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aroilcontrolsystem.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajhaysyVcUgHckXpuS5kugAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-21 17:39:59
(5 days ago)
[redacted] 178.63.12.183 - - [21/Jun/2026:19:39:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "M ...
show more
[redacted] 178.63.12.183 - - [21/Jun/2026:19:39:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:19:39:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:19:39:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:19:39:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:19:39:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
...
show less
Hacking
Web App Attack
2026-06-21 02:30:35
(5 days ago)
[redacted] 178.63.12.183 - - [21/Jun/2026:04:30:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 178.63.12.183 - - [21/Jun/2026:04:30:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:04:30:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:04:30:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:04:30:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:04:30:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:44.0) Gecko/20100101 Firefox/44.0"
[redacted] 178.63.12.183 - - [21/Jun/2026:04:30:35 +0200] "POST /xmlrpc.php
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 07:19:29
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 03:19:25.199502 2026] [security2:error] [pid 21903:tid 21903] [client 178.63.12.183:48482] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mariettacaseyclub.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mariettacaseyclub.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajOb_ZeVKMm9uA7RrCIweQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 02:23:04
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 22:22:58.938942 2026] [security2:error] [pid 3231:tid 3231] [client 178.63.12.183:48624] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.internetnameregistration.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.internetnameregistration.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajNWgu7dk0h680w2_bewXAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 15:43:14
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 11:43:09.359453 2026] [security2:error] [pid 5548:tid 5548] [client 178.63.12.183:48858] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.boaredraven.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajLAjVC5ikWeE_iwQIs9FAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 17:25:17
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 13:25:12.408880 2026] [security2:error] [pid 24610:tid 24610] [client 178.63.12.183:38650] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cienmalos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cienmalos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajGG-EUMAz_7V3Qq_TpgQQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 09:50:41
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 05:50:34.386102 2026] [security2:error] [pid 1737:tid 1737] [client 178.63.12.183:43446] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.peacecampus.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.peacecampus.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajEcat8gD2g-jJWFbP0hrQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-16 09:31:49
(1 week ago)
Blocked by CSF 13 firewall - Rule: DE/Germany/static.183.12.63.178.clients.your-server.de
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 08:32:09
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:32:05.771261 2026] [security2:error] [pid 2598:tid 2629] [client 178.63.12.183:51220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coasterdvdsonline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coasterdvdsonline.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-4hSyyuxIrnUhX8e9qyQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-15 08:19:37
(1 week ago)
Multiple WAF Violations
Web App Attack
🇬🇧
NotCool
2026-06-14 21:48:47
(1 week ago)
[7200] (WPLOGIN,XMLRPC) Login failure/trigger from 178.63.12.183 (DE/Germany/static.183.12.63.178.cl ...
show more
[7200] (WPLOGIN,XMLRPC) Login failure/trigger from 178.63.12.183 (DE/Germany/static.183.12.63.178.clients.your-server.de): 50 in the last 3600 secs
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-14 11:54:48
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 07:54:44.614394 2026] [security2:error] [pid 15663:tid 15683] [client 178.63.12.183:51858] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.datuinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.datuinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai6WhOVHV6cO72m6eJHUAwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-13 23:14:37
(1 week ago)
[redacted] 178.63.12.183 - - [14/Jun/2026:01:14:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "M ...
show more
[redacted] 178.63.12.183 - - [14/Jun/2026:01:14:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:85.0) Gecko/20100101 Firefox/85.0"
[redacted] 178.63.12.183 - - [14/Jun/2026:01:14:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0"
[redacted] 178.63.12.183 - - [14/Jun/2026:01:14:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
[redacted] 178.63.12.183 - - [14/Jun/2026:01:14:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0"
[redacted] 178.63.12.183 - - [14/Jun/2026:01:14:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0"
[redacted] 178.63.12.1
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 01:34:47
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.you ...
show more
(mod_security) mod_security (id:225170) triggered by 178.63.12.183 (static.183.12.63.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 21:34:42.523708 2026] [security2:error] [pid 23246:tid 23246] [client 178.63.12.183:37560] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||exhaustthelimits.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "exhaustthelimits.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiyzsu7HLzp5qtpXX3H-aQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack