🇺🇸
Ghost Rider
2026-02-03 22:31:48
UTC ·
(9 months ago)
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇩🇪
DEV-DNS
2025-12-15 22:24:55
UTC ·
(10 months ago)
(wordpress) Failed wordpress login from 188.241.83.75 (FR/France/Paris Department/Paris/-/[redacted])
Brute-Force
🇺🇸
Rip
2025-12-15 10:04:56
UTC ·
(10 months ago)
Authentication attack attempt. CMS Brute Force - Access Forbidden
Brute-Force
Web App Attack
Anonymous
2025-12-15 05:56:32
UTC ·
(10 months ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /wp-json/wp/v2/users?per_page=100 HTTP/1.1, GET /?rest_route=/wp/v2/users HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1.1
Hacking
Web App Attack
🇩🇪
noxtec GmbH
2025-12-15 04:36:00
UTC ·
(10 months ago)
(wordpress) Failed wordpress login from 188.241.83.75 (FR/France/-)
Brute-Force
🇺🇸
nationaleventpros.com
2025-12-15 04:20:28
UTC ·
(10 months ago)
WordPress login attempt
Brute-Force
🇦🇺
clapper
2025-12-14 22:16:59
UTC ·
(10 months ago)
(mod_security) mod_security (id:350202) triggered by 188.241.83.75 (FR/France/-): 5 in the last 3600 secs; ID: rub
Brute-Force
Bad Web Bot
🇵🇱
IROK
2025-12-14 22:03:32
UTC ·
(10 months ago)
Firewall Blocked - Unauthorized Port Scanning
...
Port Scan
🇺🇸
TPI-Abuse
2025-12-14 20:54:33
UTC ·
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 188.241.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 15:54:28.499517 2025] [security2:error] [pid 7065:tid 7065] [client 188.241.83.75:65375] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 188.241.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 15:54:28.499517 2025] [security2:error] [pid 7065:tid 7065] [client 188.241.83.75:65375] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||clossglobal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "clossglobal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aT8kBFyai5BiII7GIMuSHQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2025-12-14 14:19:05
UTC ·
(10 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2025-12-14 10:12:07
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 188.241.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 05:12:00.842305 2025] [security2:error] [pid 3591:tid 3591] [client 188.241.83.75:57673] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 188.241.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 05:12:00.842305 2025] [security2:error] [pid 3591:tid 3591] [client 188.241.83.75:57673] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||capassoart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "capassoart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aT6NcBCL0gRdAcE2SbEkFgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2025-12-14 08:05:26
UTC ·
(11 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-14 03:51:12
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 188.241.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 22:51:08.408649 2025] [security2:error] [pid 10875:tid 10875] [client 188.241.83.75:55287] M ...
show more
(mod_security) mod_security (id:225170) triggered by 188.241.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 22:51:08.408649 2025] [security2:error] [pid 10875:tid 10875] [client 188.241.83.75:55287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||canonarizona.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "canonarizona.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aT40LHkty9hHfJKnOP-oigAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-14 01:23:50
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 188.241.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 20:23:45.771052 2025] [security2:error] [pid 6631:tid 6631] [client 188.241.83.75:35689] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 188.241.83.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 20:23:45.771052 2025] [security2:error] [pid 6631:tid 6631] [client 188.241.83.75:35689] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cannabizcorp.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cannabizcorp.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aT4RodyXxCITzzQvIzAeGgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2025-12-13 19:37:00
UTC ·
(11 months ago)
URL Probing: /xmlrpc.php
Web App Attack