🇪🇸
librebit
2026-10-07 11:51:07
(2 weeks ago)
Brute force
Brute-Force
2026-10-05 13:36:01
(2 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
2026-10-03 18:44:15
(2 weeks ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-09-28 10:11:34
(3 weeks ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-24 00:31:08
(1 month ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-22 08:34:11
(1 month ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-16 05:00:55
(1 month ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-04 05:21:32
(1 month ago)
Brute force
Brute-Force
🇺🇸
nationaleventpros.com
2026-03-26 01:55:29
(6 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-03-25 17:39:27
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.206.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.206.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 13:39:21.580926 2026] [security2:error] [pid 17588:tid 17596] [client 45.140.206.154:20473] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dulemba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dulemba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acQdyTkIykI0CbIH611vdQAAAUQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 00:16:14
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.206.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.206.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 20:16:08.896844 2026] [security2:error] [pid 28311:tid 28311] [client 45.140.206.154:63019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||marveldirectory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marveldirectory.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acHXyOcsUwCDUY-Koy4WxQAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 00:25:18
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.206.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.206.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 20:25:12.896285 2026] [security2:error] [pid 30468:tid 30468] [client 45.140.206.154:10369] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||heinsohn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heinsohn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab826OszigAxwYg_bvsAsgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 23:52:54
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.206.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.206.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 19:52:47.306886 2026] [security2:error] [pid 15675:tid 15675] [client 45.140.206.154:28697] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lsippell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lsippell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab8vT6CIG-FI-s-OOCEA8QAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-03-20 17:51:35
(7 months ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇺🇸
xmission.com
2026-03-03 20:16:13
(7 months ago)
45.140.206.154 - - [03/Mar/2026:13:16:13 -0700] "POST /wp-login.php HTTP/1.1" 200 2380 "https://dooc ...
show more
45.140.206.154 - - [03/Mar/2026:13:16:13 -0700] "POST /wp-login.php HTTP/1.1" 200 2380 "https://dooce.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Brute-Force
