2026-10-08 17:27:03
(1 day ago)
Web application attack detected.
Web App Attack
🇩🇪
LRob
2026-09-05 02:40:31
(1 month ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-login.php | 2026-09-05 02:40 UTC
show less
Hacking
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-05 02:18:51
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-02 21:44:18
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 17:44:11.526789 2026] [security2:error] [pid 5835:tid 5835] [client 45.140.207.166:57401] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donnysimonton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donnysimonton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apiYq6NEGPTIjvr6NTZvbAAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-28 22:46:48
(1 month ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-20 11:28:50
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 07:28:44.486333 2026] [security2:error] [pid 20299:tid 20299] [client 45.140.207.166:29045] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bordwell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bordwell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aobk7MTs41K6-0YyvTOExwAAAHQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-19 04:08:10
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 01:23:34
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 21:23:27.484086 2026] [security2:error] [pid 9332:tid 9332] [client 45.140.207.166:42915] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cgautomatizacion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cgautomatizacion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "an-_jyif3pIsO4CPml6MTgAAAEQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-06 14:11:05
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 10:11:00.906977 2026] [security2:error] [pid 1328171:tid 1328171] [client 45.140.207.166:53933] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ironpagoda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ironpagoda.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anSV9DyQm8wGLjccJTSdyQAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 05:33:14
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:33:07.657001 2026] [security2:error] [pid 2269889:tid 2269889] [client 45.140.207.166:51611] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||davisllp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "davisllp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amGnkw6rR0VBlAN_u6osYQAAABw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 17:37:14
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.140.207.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:37:08.387437 2026] [security2:error] [pid 261655:tid 261655] [client 45.140.207.166:29125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bowerwood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bowerwood.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alpoRJDRPLm0c9HT586ihQAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-06 04:08:55
(3 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇮
inlink.ltd
2026-07-05 15:50:15
(3 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-28 08:12:16
(3 months ago)
Fail2Ban banned 45.140.207.166 for security violations in jail wp-armour. Log: 2026/06/28 08:12:16 [ ...
show more
Fail2Ban banned 45.140.207.166 for security violations in jail wp-armour. Log: 2026/06/28 08:12:16 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.140.207.166 | Target: wplogin" , client: 45.140.207.166, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 16:07:00
(3 months ago)
Fail2Ban banned 45.140.207.166 for security violations in jail wp-armour. Log: 2026/06/27 16:07:00 [ ...
show more
Fail2Ban banned 45.140.207.166 for security violations in jail wp-armour. Log: 2026/06/27 16:07:00 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.140.207.166 | Target: wplogin" , client: 45.140.207.166, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
