🇳🇱
oblivion394
2026-11-10 18:21:04
UTC ·
(7 hours ago)
Suspicious HTTP activity detected
Bad Web Bot
Web App Attack
2026-11-10 10:14:25
UTC ·
(15 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-10 10:07:07
UTC ·
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 187.223.48.52 (dsl-52-48-223-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:07:03.645315 2026] [security2:error] [pid 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 187.223.48.52 (dsl-52-48-223-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:07:03.645315 2026] [security2:error] [pid 11386:tid 11401] [client 187.223.48.52:46580] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||asetiadi.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "asetiadi.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avLsxyxsrvWvP4yeLXsiuwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:36:05
UTC ·
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 187.223.48.52 (dsl-52-48-223-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:35:57.946183 2026] [security2:error] [pid 2 ...
show more
(mod_security) mod_security (id:225170) triggered by 187.223.48.52 (dsl-52-48-223-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:35:57.946183 2026] [security2:error] [pid 26930:tid 26930] [client 187.223.48.52:33954] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||velvetculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "velvetculture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avLJXWZJnmS9tBeBiXkfVAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-09 10:40:05
UTC ·
(1 day ago)
| [Dangerous/Mexico] Aggressive IP 187.223.48.52 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇺🇸
cwytech
2026-11-09 00:24:09
UTC ·
(2 days ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-08 19:04:45
UTC ·
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 14:34:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 187.223.48.52 (dsl-52-48-223-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:34:29.838749 2026] [security2:error] [pid 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 187.223.48.52 (dsl-52-48-223-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:34:29.838749 2026] [security2:error] [pid 330752:tid 330769] [client 187.223.48.52:41966] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||conservativedemocrat.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "conservativedemocrat.aafm.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avCIdeco7CLHVA43GuqFPgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 19:44:01
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 187.223.48.52 (dsl-52-48-223-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:43:54.838537 2026] [security2:error] [pid 6 ...
show more
(mod_security) mod_security (id:225170) triggered by 187.223.48.52 (dsl-52-48-223-187-dynamic.prod-infinitum.com.mx): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:43:54.838537 2026] [security2:error] [pid 6580:tid 6580] [client 187.223.48.52:34792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jellisonrepair.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jellisonrepair.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au4t-oe7au2xyddISh9_XgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-06 01:10:01
UTC ·
(5 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
dtorrer
2026-11-05 10:51:50
UTC ·
(5 days ago)
Brute-force general attack.
Brute-Force
🇨🇿
lp
2026-11-05 08:18:02
UTC ·
(5 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 187.223.48.52
2026-11-05T09:07:31+0100 vpn Access-Reject station: 187.223.48.52
Brute-Force
Web App Attack
🇨🇿
lp
2026-11-05 05:03:07
UTC ·
(5 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 187.223.48.52
2026-11-05T05:51:26+0100 vpn Access-Reject station: 187.223.48.52
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-11-04 15:05:20
UTC ·
(6 days ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-11-01 01:10:02
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
