🇺🇸
TPI-Abuse
2026-10-26 10:36:29
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 78.85.48.200 (a200.sub48.net78.udm.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 06:36:21.181590 2026] [security2:error] [pid 6729:tid 6729] [client 78 ...
show more
(mod_security) mod_security (id:225170) triggered by 78.85.48.200 (a200.sub48.net78.udm.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 06:36:21.181590 2026] [security2:error] [pid 6729:tid 6729] [client 78.85.48.200:1529] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||silalaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "silalaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at8tJTuxJd0oPzwb6mLGFAAAABc"], referer: https://silalaw.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 10:26:52
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 78.85.48.200 (a200.sub48.net78.udm.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:26:48.243987 2026] [security2:error] [pid 4329:tid 4329] [client 78 ...
show more
(mod_security) mod_security (id:225170) triggered by 78.85.48.200 (a200.sub48.net78.udm.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:26:48.243987 2026] [security2:error] [pid 4329:tid 4329] [client 78.85.48.200:2029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cnphilos.bridgital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cnphilos.bridgital.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atyH6NvEKP1tTZ8D7DPPQwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-23 11:52:48
(5 days ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:47:43
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 78.85.48.200 (a200.sub48.net78.udm.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:47:36.162102 2026] [security2:error] [pid 6746:tid 6746] [client 78 ...
show more
(mod_security) mod_security (id:225170) triggered by 78.85.48.200 (a200.sub48.net78.udm.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:47:36.162102 2026] [security2:error] [pid 6746:tid 6746] [client 78.85.48.200:2559] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||inverzona.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inverzona.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atkk6CGucV4DbOunq93C8wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-10-21 00:59:19
(1 week ago)
WordPress login attempt
Brute-Force
🇩🇪
tentwentyfour
2026-10-20 17:00:24
(1 week ago)
Blocked for brute-forcing WordPress log-in
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-10-19 04:24:33
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
LRob
2026-10-18 12:39:46
(1 week ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
Bad Web Bot
🇳🇿
Tripwire
2026-10-16 22:09:11
(1 week ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-10-15 02:05:57
(1 week ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 18:46:06
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 78.85.48.200 (a200.sub48.net78.udm.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 14:45:58.107443 2026] [security2:error] [pid 14010:tid 14010] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 78.85.48.200 (a200.sub48.net78.udm.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 14:45:58.107443 2026] [security2:error] [pid 14010:tid 14010] [client 78.85.48.200:11026] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thepercussionworks.mikedeutsch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thepercussionworks.mikedeutsch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as0q5skY8YRUnq8k_U6PoQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RAP
2025-06-29 05:11:48
(1 year ago)
2025-06-29 05:11:48 UTC Unauthorized activity to TCP port 445. SMB
Port Scan
🇸🇰
GOVCERT
2025-03-16 20:33:33
(1 year ago)
Sweep Scan
Port Scan
🇺🇸
MPL
2023-02-07 14:40:43
(3 years ago)
tcp/23
Port Scan
🇺🇸
MrRage
2023-02-06 08:05:44
(3 years ago)
Telnet Brute Force Attempt Failed Login From IP Address 78.85.48.200
Brute-Force
