🇲🇹
Malta
2026-04-10 17:51:02
(2 months ago)
194.180.237.254 - - [10/Apr/2026:19:51:02 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" "Go-http-client ...
show more
194.180.237.254 - - [10/Apr/2026:19:51:02 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" "Go-http-client/1.1"
show less
Hacking
Web App Attack
VPN IP
🇺🇸
TPI-Abuse
2026-04-09 07:11:55
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.180.237.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 194.180.237.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 03:11:51.275921 2026] [security2:error] [pid 320049:tid 320049] [client 194.180.237.254:59313] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coolcustomproducts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coolcustomproducts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "addRN9m93CTpdhh1-HOUxwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-04-08 23:08:14
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 22:46:00
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.180.237.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 194.180.237.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 18:45:56.193725 2026] [security2:error] [pid 3643285:tid 3643285] [client 194.180.237.254:35965] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ciptaconindotara.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ciptaconindotara.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adbapE4IDXMLBxY1SQeSpAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 11:45:43
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.180.237.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 194.180.237.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 07:45:36.099249 2026] [security2:error] [pid 200871:tid 200871] [client 194.180.237.254:37819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||americanexportimport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "americanexportimport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adOc4LEx1doHwSZ3GOqJ3wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 05:20:22
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 194.180.237.254 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 194.180.237.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:20:16.803555 2026] [security2:error] [pid 23740:tid 23753] [client 194.180.237.254:41443] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||alancphotography.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alancphotography.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adNCkNTS3zJIFbZDJnpNEAAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
www.winos.me
2026-03-04 03:35:19
(3 months ago)
Banned due to high error rate on HTTP/1.1 protocol
Brute-Force
Web App Attack
2026-02-18 00:02:31
(4 months ago)
GlobalProtect Password Spraying
Brute-Force
2026-01-20 10:02:48
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.20 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.20 is noted in report timestamp
show less
Hacking
Brute-Force
🇨🇭
backslash
2025-11-19 07:20:04
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-11-16 17:18:14
(7 months ago)
wordpress-trap
Web App Attack
🇺🇸
fbarela
2025-09-26 04:00:37
(8 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force