🇺🇸
TPI-Abuse
2026-11-06 16:43:24
UTC ·
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:43:19.708442 2026] [security2:error] [pid 8106:tid 8106] [client 37.114.176.89:2272] ModS ...
show more
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:43:19.708442 2026] [security2:error] [pid 8106:tid 8106] [client 37.114.176.89:2272] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||owldreamllc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "owldreamllc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au4Dp1Sra0Rr8iXsCCcGMAAAAAA"], referer: https://owldreamllc.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 14:14:15
UTC ·
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:14:11.143998 2026] [security2:error] [pid 24870:tid 24870] [client 37.114.176.89:4729] Mo ...
show more
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:14:11.143998 2026] [security2:error] [pid 24870:tid 24870] [client 37.114.176.89:4729] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||clipper1970.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "clipper1970.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au3gs7n9zYu-C0j_LqxrHQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-04 01:10:06
UTC ·
(3 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇪🇸
Mugen
2026-11-04 00:54:56
UTC ·
(3 days ago)
Unauthorized VPN login attempts
Brute-Force
🇺🇸
TPI-Abuse
2026-10-26 11:09:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:09:45.882119 2026] [security2:error] [pid 11376:tid 11394] [client 37.114.176.89:6621] Mo ...
show more
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:09:45.882119 2026] [security2:error] [pid 11376:tid 11394] [client 37.114.176.89:6621] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||plumeraproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "plumeraproductions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at80-QpcqXgVSNtnprvCgwAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-24 16:56:23
UTC ·
(1 week ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 15:35:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:35:03.973973 2026] [security2:error] [pid 11373:tid 11373] [client 37.114.176.89:8010] Mo ...
show more
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:35:03.973973 2026] [security2:error] [pid 11373:tid 11373] [client 37.114.176.89:8010] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vintageamptubes.ink2wear.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vintageamptubes.ink2wear.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atotJyP5PrMZ0c59KjsHcgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
ICS Labs
2026-10-21 14:41:24
UTC ·
(2 weeks ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-21 UTC.
Brute-Force
🇺🇸
TPI-Abuse
2026-10-21 13:25:59
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:25:55.309131 2026] [security2:error] [pid 21045:tid 21178] [client 37.114.176.89:4145] Mo ...
show more
(mod_security) mod_security (id:225170) triggered by 37.114.176.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:25:55.309131 2026] [security2:error] [pid 21045:tid 21178] [client 37.114.176.89:4145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maroontribe.philacentric.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maroontribe.philacentric.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ati9Y6cMXs50XUiZKYQLSgAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-10-21 09:50:50
UTC ·
(2 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-10-19 17:04:47
UTC ·
(2 weeks ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Bad Web Bot
🇲🇹
Malta
2026-10-05 08:27:29
UTC ·
(1 month ago)
37.114.176.89 - - [05/Oct/2026:10:27:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇳🇱
EGP Abuse Dept
2026-09-30 09:58:47
UTC ·
(1 month ago)
Unauthorized connection to Telnet port 23
Port Scan
Hacking
🇺🇸
鬼影233
2026-09-29 14:27:05
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-09-22 10:40:18
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
