🇺🇸
entangled_mongoose
2026-08-31 21:18:38
(2 hours ago)
Probed /wp-login.php.
Web App Attack
🇬🇧
gigatech
2026-08-24 18:35:09
(1 week ago)
Webserver Probing
Web App Attack
🇿🇦
conure.sh
2026-08-21 03:34:14
(1 week ago)
csagent: score 21.8: php 404 x4, 404 noise floor x3, scanner artifact x1; 1 domain(s) in 0s
Web App Attack
🇺🇸
nationaleventpros.com
2026-08-20 18:07:06
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-18 02:20:28
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 22:20:23.330123 2026] [security2:error] [pid 31929:tid 31929] [client 45.140.207.142:47935] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||timlandry.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "timlandry.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoPBZ4fzVRxgQgs9njPQPgAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-05 01:12:14
(3 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-03 07:10:28
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 03:10:21.338651 2026] [security2:error] [pid 1950629:tid 1950629] [client 45.140.207.142:64819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||watersideaccommodation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "watersideaccommodation.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anA-3eR6sxNnx4kQ-tEBfQAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-31 14:26:18
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 10:26:12.561741 2026] [security2:error] [pid 3150138:tid 3150163] [client 45.140.207.142:35681] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rodela.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodela.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amywhAtuciwT5cPz2D_8jAAAAEs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-29 08:41:04
(2 months ago)
Fail2Ban banned 45.140.207.142 for security violations in jail wp-armour. Log: 2026/06/29 08:41:03 [ ...
show more
Fail2Ban banned 45.140.207.142 for security violations in jail wp-armour. Log: 2026/06/29 08:41:03 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.140.207.142 | Target: wplogin" , client: 45.140.207.142, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 05:28:56
(2 months ago)
Fail2Ban banned 45.140.207.142 for security violations in jail wp-armour. Log: 2026/06/27 05:28:55 [ ...
show more
Fail2Ban banned 45.140.207.142 for security violations in jail wp-armour. Log: 2026/06/27 05:28:55 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.140.207.142 | Target: wplogin" , client: 45.140.207.142, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-06-22 02:41:59
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 22:41:54.635916 2026] [security2:error] [pid 3836:tid 3836] [client 45.140.207.142:37887] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calvarycavaliers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajig8g8yOSxdLGoTKkCwNgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 19:04:30
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 15:04:24.463344 2026] [security2:error] [pid 24436:tid 24436] [client 45.140.207.142:61149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grandpont-house.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grandpont-house.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajg1uOPMcenERFLwoPEcmQAAABU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 13:47:32
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 09:47:24.681457 2026] [security2:error] [pid 15432:tid 15432] [client 45.140.207.142:9967] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sprek.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sprek.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajKlbDXc8Hc1S4Gg5lTvhQAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-05-15 14:56:52
(3 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇺🇸
TPI-Abuse
2026-04-12 00:39:31
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 20:39:27.286518 2026] [security2:error] [pid 2199907:tid 2199978] [client 45.140.207.142:25243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||elevapro.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "elevapro.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adrpvxS4mzHaa_B9qv3FSQAAANg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack