🇺🇸
TPI-Abuse
2026-11-12 17:30:48
UTC ·
(48 minutes ago)
(mod_security) mod_security (id:225170) triggered by 45.178.1.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:30:40.924942 2026] [security2:error] [pid 12018:tid 12018] [client 45.178.1.224:51148] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 45.178.1.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:30:40.924942 2026] [security2:error] [pid 12018:tid 12018] [client 45.178.1.224:51148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||circleofsound.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "circleofsound.org"] [uri "/wp-json/wp/v2/users"] [unique_id "avX3wGCDJ50gAXFV7CY0_QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-11-12 05:15:55
UTC ·
(13 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 02:06:20
UTC ·
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 45.178.1.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:06:13.266673 2026] [security2:error] [pid 628:tid 628] [client 45.178.1.224:60450] ModSecu ...
show more
(mod_security) mod_security (id:225170) triggered by 45.178.1.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:06:13.266673 2026] [security2:error] [pid 628:tid 628] [client 45.178.1.224:60450] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||b2c-llc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "b2c-llc.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avUfFbNkpoTWSM9wtt1yegAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-11-10 01:20:09
UTC ·
(2 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=32&topics%5B1%5D=53&topics%5B2%5D=65&topics%5B3%5D=33 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=32&topics%5B1%5D=53&topics%5B2%5D=65&topics%5B3%5D=33 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇩🇪
big-cloud.nl
2026-11-10 00:29:42
UTC ·
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 09:45:13
UTC ·
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 45.178.1.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:45:08.676297 2026] [security2:error] [pid 11642:tid 11642] [client 45.178.1.224:57538] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 45.178.1.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:45:08.676297 2026] [security2:error] [pid 11642:tid 11642] [client 45.178.1.224:57538] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dianamead.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dianamead.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au2hpN5xcdB0tJPzdPvUZQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-11-04 21:18:25
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.178.1.224
2026-11-04T22:07:49+0100 vpn Access-Reject station: 45.178.1.224
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 11:08:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.178.1.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:08:38.259945 2026] [security2:error] [pid 4132:tid 4132] [client 45.178.1.224:38124] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 45.178.1.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:08:38.259945 2026] [security2:error] [pid 4132:tid 4132] [client 45.178.1.224:38124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aholsniffsglue.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aholsniffsglue.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ausSNpjsytOgrnGQgzX4pAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-11-03 15:03:47
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.178.1.224
2026-11-03T15:46:58+0100 vpn Access-Reject station: 45.178.1.224
Brute-Force
Web App Attack
2026-11-03 00:46:42
UTC ·
(1 week ago)
POST /xmlrpc.php HTTP/1.1
...
Brute-Force
🇩🇪
nyuuzyou
2026-11-01 22:12:38
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-01T22:12:38Z.
Bad Web Bot
🇨🇿
Countryman
2026-11-01 15:22:10
UTC ·
(1 week ago)
IPS detection: WordPress.xmlrpc.php.system.multicall.Amplification.Attack
Hacking
🇨🇿
Countryman
2026-11-01 15:22:10
UTC ·
(1 week ago)
IPS detection: WordPress.xmlrpc.php.system.multicall.Amplification.Attack
Hacking
🇨🇿
Countryman
2026-11-01 15:22:10
UTC ·
(1 week ago)
IPS detection: WordPress.xmlrpc.php.system.multicall.Amplification.Attack
Hacking
🇨🇿
lp
2026-10-31 19:47:46
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.178.1.224
2026-10-31T20:30:02+0100 vpn Access-Reject station: 45.178.1.224
Brute-Force
Web App Attack
