🇮🇳
dineshskt4all
2026-05-03 01:24:05
(1 month ago)
178.20.212.253 - - [03/May/2026:01:24:02 +0000] "POST /wp-login.php HTTP/1.1" 200 3706 "https://shop ...
show more
178.20.212.253 - - [03/May/2026:01:24:02 +0000] "POST /wp-login.php HTTP/1.1" 200 3706 "https://shop.ninfotech.in/wp-login.php" "curl/7.88.1"
...
show less
IoT Targeted
🇺🇸
agenciahypelab.com.br
2026-04-25 11:47:09
(1 month ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-02-24 15:22:57
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.212.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.212.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 10:22:53.937934 2026] [security2:error] [pid 8676:tid 8676] [client 178.20.212.253:55595] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aaattanasio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aaattanasio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ3CTTtkaOIX8AHYqwB_iQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 12:53:27
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.212.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.212.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 07:53:20.659431 2026] [security2:error] [pid 15845:tid 15899] [client 178.20.212.253:34687] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||104ventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "104ventures.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZr8QGNjPKeEavgH0AP7ygAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-08 22:09:06
(7 months ago)
wordpress-trap
Web App Attack
🇨🇭
backslash
2025-06-19 05:00:14
(11 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇲🇽
licjperezl
2025-06-05 17:56:59
(1 year ago)
Ataque de diccionario o DDoS en nuestros servicios en linea
Brute-Force
2024-12-22 03:59:22
(1 year ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2024.12.22 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2024.12.22 is noted in report timestamp
show less
Hacking
Brute-Force
2024-12-21 13:11:32
(1 year ago)
Attempted brute force login to web vpn
Hacking
Brute-Force
2024-12-19 01:17:52
(1 year ago)
Attempted brute force login to web vpn
Hacking
Brute-Force
2024-12-17 03:41:07
(1 year ago)
Attempted brute force login to web vpn
Hacking
Brute-Force
2024-11-04 13:40:30
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-10-29 14:15:16
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 178.20.212.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.212.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 29 10:15:11.548882 2024] [security2:error] [pid 8066:tid 8066] [client 178.20.212.253:30849] [client 178.20.212.253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||webjemm.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "webjemm.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ZyDt72PcUOCUYLkTji8KsQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-18 10:37:30
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 178.20.212.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.212.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 18 06:37:23.160352 2024] [security2:error] [pid 12473:tid 12473] [client 178.20.212.253:19437] [client 178.20.212.253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||auguststoten.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "auguststoten.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZxI6YwZdR4FXzp8xeC_tBgAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-10-18 00:40:51
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH