🇺🇸
TPI-Abuse
2026-06-17 11:27:18
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:27:13.396658 2026] [security2:error] [pid 32528:tid 32528] [client 45.132.186.213:13209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||corchard.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "corchard.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajKEkZIEyFzp6zocFfkn5gAAACU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 01:26:39
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:26:35.809780 2026] [security2:error] [pid 6667:tid 6667] [client 45.132.186.213:18339] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||realclean.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realclean.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajCmS85E8AXYg6m9oraB3QAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-15 00:27:38
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
kosada.com
2026-06-11 17:41:59
(2 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-06-09 04:55:45
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:55:37.898518 2026] [security2:error] [pid 12439:tid 12439] [client 45.132.186.213:65077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||otfes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "otfes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiecyccDs-epLUlmmEHIgAAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 19:09:22
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 15:09:17.611780 2026] [security2:error] [pid 26165:tid 26165] [client 45.132.186.213:52529] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||enfiestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enfiestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiHNXaKdH28fZWZeFJFX5gAAACQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-05-29 05:51:14
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
kosada.com
2026-05-21 15:22:24
(1 month ago)
Web password guessing
Brute-Force
2026-05-20 14:55:20
(1 month ago)
FPROCO WEBEXPLOIT 45.132.186.213 (45.132.186.213)
Web App Attack
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(4 months ago)
Probing for Exploits
Exploited Host
Web App Attack
2025-12-17 16:26:43
(6 months ago)
2025-12-17T18:26:42.623004+02:00 zanati wp(www.sahpa.co.za)[1366836]: Blocked authentication attempt ...
show more
2025-12-17T18:26:42.623004+02:00 zanati wp(www.sahpa.co.za)[1366836]: Blocked authentication attempt for admin from 45.132.186.213
...
show less
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-17 13:12:06
(6 months ago)
WP Login Scan Activities
Web App Attack
2025-12-17 12:57:07
(6 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇦
SSH-Admin
2025-12-01 02:33:03
(6 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-21 07:46:27
(7 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host