🇨🇭
backslash
2026-04-16 14:06:02
(1 month ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇬🇧
Steve
2026-02-10 16:58:22
(3 months ago)
Repeated attempts against wordpress site
Brute-Force
Web App Attack
🇫🇷
masterguru
2025-12-23 11:04:15
(5 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 185.77.220.161 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 185.77.220.161 (US/United States/-): 1 in the last 3600 secs (0-197)
show less
Hacking
🇺🇸
fbarela
2025-11-14 21:00:37
(6 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇲🇽
licjperezl
2025-06-05 17:57:06
(11 months ago)
Ataque de diccionario o DDoS en nuestros servicios en linea
Brute-Force
🇺🇸
TPI-Abuse
2025-05-07 20:15:12
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 16:15:05.618637 2025] [security2:error] [pid 4183860:tid 4183860] [client 185.77.220.161:48749] [client 185.77.220.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aemcmullin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aemcmullin.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBu_SbtrwRG0QocQsX_p5wAAAAc"], referer: https://aemcmullin.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 17:47:52
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 13:47:44.210135 2025] [security2:error] [pid 3290:tid 3290] [client 185.77.220.161:56775] [client 185.77.220.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harwoodmechanical.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harwoodmechanical.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBEQwHwAz0sxFDfQYA8w4gAAAAU"], referer: https://harwoodmechanical.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-29 19:40:04
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
🇨🇦
wil.com
2024-09-23 17:28:46
(1 year ago)
GlobalProtect login attempts with user jhazziez.
VPN IP
Brute-Force
🇺🇸
TPI-Abuse
2024-02-09 03:06:51
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 08 22:06:47.482058 2024] [security2:error] [pid 15627] [client 185.77.220.161:46599] [client 185.77.220.161] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Siento/Thumbs.db"] [unique_id "ZcWWxxoH3TN-E5piTPbThgAAABA"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/Siento/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-29 13:06:25
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 29 08:06:18.125839 2023] [security2:error] [pid 14233] [client 185.77.220.161:55935] [client 185.77.220.161] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portalvasco.com|F|2"] [data ".barracuda.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portalvasco.com"] [uri "/blog/2013/04/dns-publicos-opendns-vs-norton-dns/www.barracuda.com"] [unique_id "ZY7ESgLv-Y1OvPnmIndn1gAAAAY"], referer: https://portalvasco.com/blog/?p=7362
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-27 16:27:43
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.77.220.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 11:27:38.529077 2023] [security2:error] [pid 503] [client 185.77.220.161:61863] [client 185.77.220.161] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.accordionstars.com|F|2"] [data ".accordionfactory.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.accordionstars.com"] [uri "/www.accordionfactory.com"] [unique_id "ZYxQehv1hssQjFHLIHsyLwAAAAE"], referer: http://www.accordionstars.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-11-02 02:53:00
(2 years ago)
"Illegal redirection attempt"
Brute-Force
2023-10-09 12:37:00
(2 years ago)
"Illegal redirection attempt"
Brute-Force
2023-10-08 17:03:00
(2 years ago)
"Illegal redirection attempt"
Brute-Force