2026-02-23 16:30:06
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇮🇹
VHosting
2026-02-23 11:11:52
(3 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇫🇷
UM3
2026-02-23 09:22:10
(3 months ago)
Exim Auth Failed
Brute-Force
🇺🇸
TPI-Abuse
2025-11-10 06:22:54
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 37.19.198.46 (unn-37-19-198-46.datapacket.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 37.19.198.46 (unn-37-19-198-46.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 01:22:49.486894 2025] [security2:error] [pid 11238:tid 11238] [client 37.19.198.46:62798] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||solcargomiami.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "solcargomiami.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRGEuetWatWZzRKNgXaVuAAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 04:22:23
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 37.19.198.46 (unn-37-19-198-46.datapacket.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 37.19.198.46 (unn-37-19-198-46.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 23:22:16.951323 2025] [security2:error] [pid 20734:tid 20734] [client 37.19.198.46:55166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cucciniello.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cucciniello.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRFoeJ13YTknbiglQ2oHvwAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 03:48:44
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 37.19.198.46 (unn-37-19-198-46.datapacket.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 37.19.198.46 (unn-37-19-198-46.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 22:48:37.118604 2025] [security2:error] [pid 24195:tid 24195] [client 37.19.198.46:32763] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cipcug.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cipcug.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRFglSlVuQpypfsb8EodxwAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2025-09-06 10:54:00
(9 months ago)
IPBlock protected site ID [4730-fr].
Public forum SPAM
Blog Spam
🇵🇱
strefapi_com
2025-08-15 20:41:53
(9 months ago)
Brute-force or trying open relay
...
Brute-Force
Web App Attack
2025-08-04 15:32:45
(10 months ago)
Botnet - login attempts with leaked random user/pass lists
Hacking
Brute-Force
Web App Attack
🇲🇳
Public CSIRT/CC of Mongolia
2025-06-13 03:00:25
(1 year ago)
Honeypot hit: Unauthorized traffic (32 bytes of payload); 3001 [11] TCP
Port Scan
🇩🇪
marzzzello
2025-05-24 01:55:58
(1 year ago)
Ports: 10x 11162
Port Scan
🇦🇺
clapper
2025-05-11 14:43:55
(1 year ago)
(mod_security) mod_security (id:980001) triggered by 37.19.198.46 (US/United States/unn-37-19-198-46 ...
show more
(mod_security) mod_security (id:980001) triggered by 37.19.198.46 (US/United States/unn-37-19-198-46.datapacket.com): 5 in the last 3600 secs; ID: Dan
show less
Brute-Force
Bad Web Bot
🇪🇸
masterguru
2025-05-11 12:28:24
(1 year ago)
COMODO WAF: Rogue web site crawler. Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblo ...
show more
COMODO WAF: Rogue web site crawler. Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( (210831-122)
show less
Hacking
2025-05-10 19:29:58
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-05-10 05:43:22
(1 year ago)
(mod_security) mod_security (id:210831) triggered by 37.19.198.46 (unn-37-19-198-46.datapacket.com): ...
show more
(mod_security) mod_security (id:210831) triggered by 37.19.198.46 (unn-37-19-198-46.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 10 01:43:15.654358 2025] [security2:error] [pid 1251965:tid 1251965] [client 37.19.198.46:36494] [client 37.19.198.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.cpking.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cpking.com"] [uri "/robots.txt"] [unique_id "aB7nc29ErT5xUFwcM8EkdAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack