🇦🇺
FireGuard Server
2026-11-14 03:25:06
UTC ·
(10 hours ago)
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443
Port Scan
Hacking
2026-11-13 14:49:05
UTC ·
(23 hours ago)
Bot / scanning and/or hacking attempts: [0/0] init, [1/1] done, POST /xmlrpc.php HTTP/2.0
Hacking
Web App Attack
2026-11-13 02:50:16
UTC ·
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-13 02:46:55
UTC ·
(1 day ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:28:07
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 78.111.149.183 (ip183-149-111-78.pppoe.ivanovo.stream.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:28:02.986302 2026] [security2:error] [pid 9707:ti ...
show more
(mod_security) mod_security (id:225170) triggered by 78.111.149.183 (ip183-149-111-78.pppoe.ivanovo.stream.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:28:02.986302 2026] [security2:error] [pid 9707:tid 9707] [client 78.111.149.183:38676] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brexitop.bamedica.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brexitop.bamedica.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avZ1st3NScx8k6tdHu5qkgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:02:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 78.111.149.183 (ip183-149-111-78.pppoe.ivanovo.stream.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:02:11.118356 2026] [security2:error] [pid 3534:ti ...
show more
(mod_security) mod_security (id:225170) triggered by 78.111.149.183 (ip183-149-111-78.pppoe.ivanovo.stream.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:02:11.118356 2026] [security2:error] [pid 3534:tid 3534] [client 78.111.149.183:52691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||churchbehindthewalls.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "churchbehindthewalls.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avZvo8IQ4By0xRYOj6cd3QAAABE"], referer: http://churchbehindthewalls.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 00:07:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 78.111.149.183 (ip183-149-111-78.pppoe.ivanovo.stream.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 19:06:49.675872 2026] [security2:error] [pid 3637:ti ...
show more
(mod_security) mod_security (id:225170) triggered by 78.111.149.183 (ip183-149-111-78.pppoe.ivanovo.stream.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 19:06:49.675872 2026] [security2:error] [pid 3637:tid 3637] [client 78.111.149.183:49255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||crep-psych.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crep-psych.org"] [uri "/wp-json/wp/v2/users"] [unique_id "avZUmVjamxr4rQmBxq3KKQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
throny
2026-11-12 22:54:52
UTC ·
(1 day ago)
Used an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-12 22:42 UTC, API call DescribeInstances, client silentvs-hitworker/1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 11:01:29
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 78.111.149.183 (ip183-149-111-78.pppoe.ivanovo.stream.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:01:22.670490 2026] [security2:error] [pid 8615:ti ...
show more
(mod_security) mod_security (id:225170) triggered by 78.111.149.183 (ip183-149-111-78.pppoe.ivanovo.stream.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:01:22.670490 2026] [security2:error] [pid 8615:tid 8615] [client 78.111.149.183:55527] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cuetzpalin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cuetzpalin.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avWcguBP_-zyHvAaYtbSNQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
