🇺🇸
TPI-Abuse
2026-07-26 03:59:12
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 23:59:07.699043 2026] [security2:error] [pid 2367797:tid 2367797] [client 45.132.186.32:29151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thebumans.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thebumans.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amWGC0z6Gc2CYySoDhNiHAAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 21:44:31
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 17:44:27.901384 2026] [security2:error] [pid 1243:tid 1243] [client 45.132.186.32:54375] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wlsn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wlsn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amUuO5VUuUT-j1ijVy2TjAAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 15:14:28
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 11:14:23.627897 2026] [security2:error] [pid 7217:tid 7217] [client 45.132.186.32:13103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||corstratinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "corstratinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amTSzzwrLPbmU-QMIU7wQgAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-07-25 07:41:39
(2 days ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-03-24 11:20:06
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 07:19:59.395825 2026] [security2:error] [pid 8594:tid 8596] [client 45.132.186.32:60305] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bakmail.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bakmail.net"] [uri "/wp-json/wp/v2/users"] [unique_id "acJzX4P5z74LRyiBHQi7nAAAAEA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-03-24 09:04:30
(4 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
ambor
2026-03-23 00:43:27
(4 months ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 22:44:05
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 18:43:57.385134 2026] [security2:error] [pid 16137:tid 16137] [client 45.132.186.32:60057] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||caquintet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "caquintet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acBwrZtlxDAzZLbKGRp3BwAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-03-22 13:37:22
(4 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-03-12 16:32:11
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 12:32:02.522761 2026] [security2:error] [pid 20053:tid 20053] [client 45.132.186.32:45557] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newmooncafe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newmooncafe.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abLqgqXJpdEdYKjx02v8BQAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-11 14:50:18
(4 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇨🇳
ThreatBook.io
2025-05-05 00:04:08
(1 year ago)
2025-05-04 11:55:40 /+CSCOE+/logon.html
Web App Attack
🇨🇳
ThreatBook.io
2025-04-23 00:06:21
(1 year ago)
2025-04-22 08:51:49 /+CSCOE+/logon.html
Web App Attack
🇨🇿
lp
2025-03-16 04:22:39
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.186.32
2025-03-16T03:52:27+01: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.186.32
2025-03-16T03:52:27+01:00 vpn Access-Reject 'isabelle' station: 45.132.186.32 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-03-15 02:53:18
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.186.32
2025-03-15T02:39:55+01: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.186.32
2025-03-15T02:39:55+01:00 vpn Access-Reject 'burger' station: 45.132.186.32 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack