🇺🇸
TPI-Abuse
2026-11-11 06:39:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 62.181.56.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:39:15.777608 2026] [security2:error] [pid 29992:tid 29992] [client 62.181.56.4:46574] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 62.181.56.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:39:15.777608 2026] [security2:error] [pid 29992:tid 29992] [client 62.181.56.4:46574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hisfavorite.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hisfavorite.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avQNk75oEUjQAcCwAJD67QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:42:57
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 62.181.56.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:42:51.883161 2026] [security2:error] [pid 25088:tid 25114] [client 62.181.56.4:43684] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 62.181.56.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:42:51.883161 2026] [security2:error] [pid 25088:tid 25114] [client 62.181.56.4:43684] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dasperformance.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dasperformance.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avLK-yQYMGSSv0VWtlIRmQAAAFg"], referer: https://dasperformance.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-10 00:03:40
UTC ·
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
🇭🇺
bcsaba
2026-11-09 17:38:23
UTC ·
(2 days ago)
CMS (WordPress or Joomla) login attempt.
62.181.56.4 - - [09/Nov/2026:18:38:22 +0100] "POST /wp-login.php HTTP/2.0" 200 3429 "https://*REDACTED*/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Sa ...
show more
CMS (WordPress or Joomla) login attempt.
62.181.56.4 - - [09/Nov/2026:18:38:22 +0100] "POST /wp-login.php HTTP/2.0" 200 3429 "https://*REDACTED*/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
🇩🇪
LRob
2026-11-09 17:11:53
UTC ·
(2 days ago)
Web exploit attempt | method: POST, GET | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64; rv:148.0) Gecko/20100101 Firefox/148.0
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 03:57:27
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 62.181.56.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 22:57:18.962992 2026] [security2:error] [pid 17495:tid 17495] [client 62.181.56.4:45160] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 62.181.56.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 22:57:18.962992 2026] [security2:error] [pid 17495:tid 17495] [client 62.181.56.4:45160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nwuoregon.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nwuoregon.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "au6hnnIfEXYaCn1HdvQFuwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-07 02:50:03
UTC ·
(5 days ago)
| [Dangerous/Russia] Aggressive IP 62.181.56.4 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-11-06 23:40:07
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 62.181.56.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:40:01.516801 2026] [security2:error] [pid 23646:tid 23749] [client 62.181.56.4:55310] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 62.181.56.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:40:01.516801 2026] [security2:error] [pid 23646:tid 23749] [client 62.181.56.4:55310] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nourishmentofthesoul.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nourishmentofthesoul.org"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "au5lUcUQ_D7-fnQ9ukuwCgAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-11-05 17:04:04
UTC ·
(6 days ago)
Wordfence waf block on registrymatters
Web App Attack
🇨🇿
lp
2026-11-04 18:18:25
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 62.181.56.4
2026-11-04T19:09:45+0100 vpn Access-Reject station: 62.181.56.4
Brute-Force
Web App Attack
🇳🇿
Tripwire
2026-11-03 15:17:12
UTC ·
(1 week ago)
Probing for Wordpress - /wp-login.php
Brute-Force
Web App Attack
🇨🇿
lp
2026-11-03 12:33:43
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 62.181.56.4
2026-11-03T13:27:06+0100 vpn Access-Reject station: 62.181.56.4
Brute-Force
Web App Attack
